Spezialist / Architekt für Privileged Access Management (PAM) (m/w/d)
Permanent Employment, Experienced Position - München-- automatic translation --
We are looking for a Specialist/Architect for Privileged Access Management (m/f/d) for one of our locations - preferably Munich - as soon as possible.
You will be responsible for the secure, stable and auditable operation of our Segura-based PAM infrastructure in complex private cloud and hybrid environments. As part of our cybersecurity team, you will work closely with system administration, network, DevOps, compliance and customers and further develop the platform technically and conceptually.
You will be responsible for the secure, stable and auditable operation of our Segura-based PAM infrastructure in complex private cloud and hybrid environments. As part of our cybersecurity team, you will work closely with system administration, network, DevOps, compliance and customers and further develop the platform technically and conceptually.
Your tasks
Architecture and further development
- Design, further development and operation of the Segura PAM platform, in particular for credential management, session management, just-in-time access and audit-proof recordings.
- Development and implementation of PAM requirements, taking into account role and authorization concepts, least privilege, zero trust and RBAC.
- Segura integrates with Active Directory and LDAP, as well as authentication and federation technologies such as MFA, RADIUS, SAML, and OpenID Connect.
- Connection of Windows and Linux systems, network components, databases, web applications, cloud platforms and Kubernetes environments.
- Automate platform operations, onboarding, and configuration via APIs, PowerShell, Python, Bash, as well as infrastructure-as-code and CI/CD practices.
- Ensuring highly available, stable and secure operations including patching, release, backup and recovery processes.
- Development and maintenance of monitoring, logging, alerting and capacity monitoring as well as structured error analysis and sustainable troubleshooting.
- Analyze security-related events in the context of privileged access and collaborate with SOC, incident response, and vulnerability management teams.
- Implementation and support of technical tests, vulnerability analyses, emergency drills and regular authorization reviews.
- Create and maintain architecture, operational, security, and emergency documentation for regulated customer environments.
- Ensuring compliance with internal specifications and relevant requirements, for example ISO 27001, BSI IT-Grundschutz, NIS2, DORA, DSGVO and KRITIS.
- Collaboration in internal and external audits, IT risk assessments and in the processing of findings and measures.
- Advising internal teams and customers on PAM architectures, secure administration channels, best practices and the risk-based introduction of new use cases.
Your profile
- Degree in computer science or business informatics, technical training or a comparable qualification with relevant professional experience.
- Several years of experience in the design, implementation and operation of PAM solutions, ideally with Segura 360 or senhasegura in regulated or safety-critical environments.
- In-depth knowledge of Active Directory, LDAP, Windows and Linux administration, network protocols, PKI, TLS and modern authentication methods.
- Practical experience with scripting and automation, for example PowerShell, Python or Bash, as well as confident handling of Git and APIs.
- Experience integrating and securely operating PAM solutions across heterogeneous infrastructure, cloud, and platform environments.
- Understanding of container and platform technologies such as Docker, Kubernetes or OpenShift as well as highly available and hardened operating models.
- Experience in dealing with sensitive data, privileged accounts, non-human identities and regulatory requirements.
- Strong security awareness, analytical and structured way of working as well as very good communication skills in German and English
- Manufacturer certifications for Segura 360 or senhasegura or comparable PAM products.
- Experience with open-source PAM, Bastion, or Secure Access solutions, especially Warpgate, Teleport, HashiCorp Boundary, or Apache Guacamole.
- Knowledge of CyberArk or other commercial PAM solutions, as well as the migration or coexistence of different PAM platforms.
- Knowledge of secrets management and vaulting for non-human identities, applications, CI/CD pipelines, and Kubernetes workloads.
- Certifications or demonstrable knowledge of ISO 27001, BSI IT-Grundschutz, Cloud Security, Kubernetes Security or IT Service Management.
Contact Information
Apply now!If you have any questions, feel free to contact:karriere@manage-now.de
ABOUT US
Manage Now is a leading IT service and managed services provider for enterprises and public institutions that want to strategically develop their IT while ensuring stable operations at the same time. With over 50 years of combined IT and project experience, we take responsibility for complex IT landscapes. In doing so, we combine consulting, operations, and transformation in an integrated approach, creating the foundation for IT that functions reliably while remaining controllable. Our integrated portfolio ranges from sovereign cloud and hybrid and multi-cloud to SAP and application management, as well as security and modern workplace environments, creating the foundation for IT that functions reliably while remaining controllable. Organizations can decide for themselves how much responsibility they want to hand over, from individual services to full end-to-end operational responsibility.