Senior PAM Solution Specialist
DHL · Prague
With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experiences.
#DHL #DHLITServices #GreatPlace
Grow together
We are looking for a Senior PAM Solution Specialist to join our security engineering team responsible for enterprise Privileged Access Management services.
You will engineer, improve and operate PAM capabilities protecting privileged access across a large and diverse IT infrastructure. We are looking for someone who combines solid technical knowledge with a strong engineering mindset: someone who sees a problem, takes ownership and drives it toward a solution rather than waiting for detailed instructions.
We value curiosity, accountability and the willingness to challenge how things are done today as much as expertise in a particular PAM technology.
What you will do
- Engineer, configure and continuously improve enterprise PAM solutions.
- Design and implement onboarding of privileged accounts, administrative identities, service accounts and target platforms.
- Develop and maintain access policies, credential rotation and privileged session management capabilities.
- Integrate PAM with Windows, Linux, Active Directory, databases, applications and infrastructure platforms.
- Troubleshoot complex authentication, connectivity, platform and integration issues.
- Improve reliability, scalability, security and operational efficiency of the PAM service.
- Identify repetitive operational activities and automate them using scripting and APIs.
- Participate in upgrades, migrations, lifecycle management and technical projects.
- Work directly with infrastructure, application and security teams to understand their requirements and develop practical solutions.
- Contribute to technical documentation, standards and engineering practices.
- Proactively identify weaknesses or improvement opportunities and drive them rather than waiting for somebody else to take ownership.
Ready to embark on the journey? Here’s what we are looking for:
Technical background:
- Enterprise Privileged Access Management, ideally CyberArk or comparable platforms.
- Windows Server and Linux administration.
- Active Directory, LDAP and enterprise authentication concepts.
- Privileged accounts, service accounts and credential lifecycle management.
- Networking fundamentals, including DNS, TCP/IP, firewalls, proxies and TLS.
- PowerShell, Python or another scripting language.
- REST APIs and system integrations.
- Cloud platforms such as Azure, AWS or GCP.
- Security principles including least privilege, separation of duties and Zero Trust.
- Monitoring, logging and troubleshooting in enterprise environments.
Direct CyberArk experience is an advantage, but it is not mandatory if you bring strong infrastructure/security engineering fundamentals and are motivated to learn.
The mindset we are looking for:
You:
- Take ownership. When you discover a problem, your first reaction is to understand how it can be solved.
- Are self-driven. You do not need a manager to break your work into individual tasks.
- Are comfortable with change. New technology, new requirements and changing priorities do not intimidate you.
- Question the status quo constructively. "We have always done it this way" is not sufficient justification for you.
- Look for improvement. You naturally notice manual processes, technical debt and inefficient ways of working.
- Learn independently. You are comfortable entering an unfamiliar technical area and building the required knowledge.
- Collaborate. You challenge ideas without creating unnecessary conflict.
- Finish what you start. You take responsibility not only for designing solutions but for making them work in reality.
An array of benefits for you:
- An extra week of holiday (25 days/year), 6 Self-sickness days, Full compensation for up to 10 days absence due to illness/year, Up to 3 additional personal paid days off for long-term service
- Annual bonus
- On-going professional & technical training and certifications
- Flexible working hours with home office possibilities (up to 3 days HO per week)
- Edenred Cafeteria program including fully covered lunch vouchers; pension/life insurance, medical membership
- Multisport card, Discounts with selected partners, Company events and Health Days, Fruit days, One-time maternity grant, Opportunity to buy Deutsche Post AG shares at a discount, and much more
If the role sounds interesting to you, please let us know and join us in delivering the future of DHL logistics!
In accordance with the legitimate interest of DHL IT Services, the candidate for this role shall provide a copy of his/her extract from criminal record.
This role may not be performed if the criminal record confirms that the employee has been lawfully convicted for the criminal offence:
against property;
in the area of processing of personal data and/ or breach of secrecy of correspondence;
any other criminal offence connected with the terrorism.