Senior Secret Management Solution Specialist
DHL · Prague
With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experiences.
#DHL #DHLITServices #GreatPlace
Grow together
We are looking for a Senior Secret Management Solution Specialist to engineer and evolve enterprise capabilities for securely managing application and machine secrets across traditional infrastructure, cloud, container and DevOps environments.
The role sits at the intersection of security, infrastructure, application platforms and DevOps, so we are looking for an engineer who enjoys learning technologies outside their immediate area of expertise.
The person does not need to know every platform already. We care strongly about the ability and motivation to learn, experiment and solve problems independently.
What you will do
- Engineer and operate enterprise Secret Management capabilities.
- Integrate applications and workloads with Secret Management platforms.
- Design secure patterns for retrieving and managing application credentials and other machine secrets.
- Support Secret Management use cases across on-premises, cloud and container platforms.
- Work with Kubernetes/OpenShift workloads and CI/CD environments.
- Develop integrations using APIs, CLI tools and automation.
- Help application teams move away from embedded, static or manually managed credentials.
- Implement lifecycle management and rotation patterns.
- Troubleshoot application authentication and Secret Management integrations.
- Develop reusable integration patterns to simplify onboarding.
- Improve automation and reduce manual service operations.
- Work with application, cloud, DevOps and infrastructure teams.
- Proactively explore technologies that can improve workload authentication and secrets handling.
Ready to embark on the journey? Here’s what we are looking for:
Technical background
Experience with some of the following would be valuable:
- Secret Management platforms such as CyberArk Secrets Manager/Conjur, HashiCorp Vault or comparable technologies.
- Kubernetes and/or OpenShift.
- CI/CD platforms and pipelines.
- GitHub/GitLab/Azure DevOps or similar development ecosystems.
- REST APIs.
- Linux and Windows.
- Containers and cloud-native technologies.
- Azure, AWS or GCP.
- PKI, TLS and certificates.
- Identity and authentication technologies such as OIDC/OAuth.
- Infrastructure and application authentication concepts.
- PowerShell, Python, Bash or comparable automation languages.
- Infrastructure as Code and Git-based engineering workflows.
- General networking and enterprise infrastructure fundamentals.
Experience with a specific Secret Management product is less important than strong engineering fundamentals and the ability to learn new technologies quickly.
The mindset we are looking for
You:
- Enjoy solving problems you have never encountered before.
- Take initiative without waiting for someone to assign every next step.
- Are naturally curious about how technologies work.
- Consider repetitive manual work an opportunity for automation.
- Are not afraid to experiment and occasionally discover that the first approach was wrong.
- Challenge existing processes constructively.
- Think about the consumer experience, not only the security technology.
- Communicate effectively with both security specialists and application engineers.
- Take responsibility from problem identification through implementation.
- Want to continuously improve both the technology and the service around it.
An array of benefits for you:
- An extra week of holiday (25 days/year), 6 Self-sickness days, Full compensation for up to 10 days absence due to illness/year, Up to 3 additional personal paid days off for long-term service
- Annual bonus
- On-going professional & technical training and certifications
- Flexible working hours with home office possibilities (up to 3 days HO per week)
- Edenred Cafeteria program including fully covered lunch vouchers; pension/life insurance, medical membership
- Multisport card, Discounts with selected partners, Company events and Health Days, Fruit days, One-time maternity grant, Opportunity to buy Deutsche Post AG shares at a discount, and much more
If the role sounds interesting to you, please let us know and join us in delivering the future of DHL logistics!
In accordance with the legitimate interest of DHL IT Services, the candidate for this role shall provide a copy of his/her extract from criminal record.
This role may not be performed if the criminal record confirms that the employee has been lawfully convicted for the criminal offence:
against property;
in the area of processing of personal data and/ or breach of secrecy of correspondence;
any other criminal offence connected with the terrorism.