Principal PAM Solution Specialist
DHL · Prague
With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experiences.
#DHL #DHLITServices #GreatPlace
We are looking for a Principal PAM Solution Specialist who will help shape the technical direction of our enterprise Privileged Access Management capabilities.
This is not simply a senior PAM administrator position. You will work across technologies, platforms and organizational boundaries to solve complex privileged-access challenges and evolve the PAM service.
We are looking for someone capable of operating effectively when the problem is known but the solution is not.
What you will do
- Provide technical leadership for enterprise PAM architecture and engineering.
- Define technical direction, patterns and engineering standards for privileged access.
- Design solutions covering traditional infrastructure, cloud and modern application environments.
- Lead technically complex PAM integrations and transformation initiatives.
- Evaluate existing architecture and identify opportunities for modernization and simplification.
- Translate security requirements into solutions that can realistically operate at enterprise scale.
- Guide engineering decisions involving availability, scalability, security and operational complexity.
- Drive automation and API-based integration wherever appropriate.
- Act as a technical escalation point for difficult engineering problems.
- Partner with infrastructure, cloud, architecture, application and cybersecurity teams.
- Challenge existing approaches when better alternatives exist.
- Mentor engineers and raise technical capability across the team.
- Evaluate emerging technologies and determine where they provide genuine value rather than adopting technology for its own sake.
Technical background
Strong knowledge across multiple areas is more important than expertise in every item:
- Enterprise PAM architecture and engineering.
- CyberArk or comparable enterprise PAM platforms.
- Windows, Linux and Active Directory.
- Identity, authentication and authorization concepts.
- Enterprise infrastructure architecture.
- Hybrid and cloud environments.
- Security architecture and Zero Trust concepts.
- APIs and automation.
- PowerShell, Python or comparable scripting/automation technologies.
- High availability, resilience and disaster recovery.
- Integration with SIEM, ITSM and other enterprise security platforms.
- Understanding of modern workload identity and secrets-management concepts is highly desirable.
The mindset we are looking for
- Create direction rather than wait for direction.
- Be comfortable making progress when requirements are incomplete.
- See problems across organizational and technology boundaries.
- Challenge assumptions while remaining pragmatic.
- Balance security, engineering quality and operational reality.
- Take responsibility for outcomes rather than only recommendations.
- Build consensus through technical credibility rather than hierarchy.
- Make other engineers better through mentoring and knowledge sharing.
- Recognize when perfection is preventing progress.
- Be willing to make decisions, explain them and revisit them when new information becomes available.
Most importantly, we want someone who asks:
"How can we make this better?"
rather than:
"Tell me exactly what you want me to do."
An array of benefits for you:
- An extra week of holiday (25 days/year), 6 Self-sickness days, Full compensation for up to 10 days absence due to illness/year, Up to 3 additional personal paid days off for long-term service
- Annual bonus
- On-going professional & technical training and certifications
- Flexible working hours with home office possibilities (up to 3 days HO per week)
- Edenred Cafeteria program including fully covered lunch vouchers; pension/life insurance, medical membership
- Multisport card, Discounts with selected partners, Company events and Health Days, Fruit days, One-time maternity grant, Opportunity to buy Deutsche Post AG shares at a discount, and much more
If the role sounds interesting to you, please let us know and join us in delivering the future of DHL logistics!
In accordance with the legitimate interest of DHL IT Services, the candidate for this role shall provide a copy of his/her extract from criminal record.
This role may not be performed if the criminal record confirms that the employee has been lawfully convicted for the criminal offence:
against property;
in the area of processing of personal data and/ or breach of secrecy of correspondence;
any other criminal offence connected with the terrorism.