Security Engineer PAM & Vault 100% (f/m/d)

Tasks

• Compliance or PAM and vault infrastructures across hybrid and cloud environments
• Analysis of evolving business and security requirements, assessment of their technical feasibility, risk implications, and impact on existing systems, enterprise architecture standards, and regulatory obligations
• Proactive involvement in the development of secure, scalable architectures, operating concepts, and standardized engineering processes in line with corporate IT strategies
• Maintain comprehensive, up-to-date technical documentation, including system designs, runbooks, configurations, and incident post-mortems to ensure transparency and operational continuity.
• Leading troubleshooting and root cause analysis for complex technical problems to ensure timely resolution and minimize service interruption
• Providing 2nd and 3rd level engineering support, including participation in an on-call rotation, coordination with cross-functional teams to efficiently resolve critical incidents

Requirements

• Practical experience with privileged access and secret management solutions, preferably Delinea (formerly Thycotic) Secret Server or HashiCorp Vault, including implementation, administration, and integration with enterprise systems
• Practical understanding of key IT security domains; experience with one or more of the following is advantageous:
  • Secure web gateway technologies (e.g., Zscaler)
  • Application delivery controller (e.g., Citrix ADC/NetScaler)
  • Public Key Infrastructure (PKI)
  • Multi-factor authentication frameworks (MFA)
• At least 2-3 years of experience in 2nd and 3rd level engineering or operations roles supporting enterprise IT security services, ideally in complex, highly regulated environments (e.g., financial services)
• Technical expertise:
  • Strong system administration skills across Linux and Windows platforms
• Security fundamentals: Solid understanding of core cybersecurity principles, including authentication, authorization, encryption, zero-trust models, and least-privilege access controls
• Education and certificates:
  • Relevant academic background (e.g., bachelor's or master's degree in computer science, information security, or a related field)
  • Industry certifications such as CISSP, CISM, or CISSP and CEB are a strong asset.
  • HashiCorp Certified Vault Associate (or higher) is desirable but not mandatory.
  • Delinea Certified Technician (DCT) certification is desirable but not mandatory.

We offer