Principal Secret Management Solution Specialist

With a global team of 5600+ IT professionals, DHL IT Services connects people and keeps the global economy running by continuously innovating and creating sustainable digital solutions. We work beyond global borders and push boundaries across all dimensions of logistics. You can leave your mark shaping the technology backbone of the biggest logistics company of the world. All our locations have earned #GreatPlaceToWork certification, reflecting our commitment to exceptional employee experiences.

#DHL #DHLITServices #GreatPlace

Grow together

We are looking for a Principal Secret Management Solution Specialist to help define the future technical direction of machine identity, workload authentication and Secret Management within our enterprise environment.

This role goes beyond implementing a Secret Management product. You will address the broader question:

How should applications, workloads, automation and infrastructure securely establish identity and obtain the credentials or secrets they require?

You will operate across traditional infrastructure, cloud, Kubernetes/OpenShift, DevOps and application environments.

What you will do

• Define enterprise Secret Management architecture and technical strategy.
• Establish patterns for secure workload authentication and secrets consumption.
• Design architectures spanning on-premises, cloud and container environments.
• Provide technical leadership for Kubernetes/OpenShift, CI/CD and cloud Secret Management use cases.
• Evaluate approaches based on static credentials versus identity-based authentication.
• Define integrations with enterprise identity, PAM, cloud and application platforms.
• Establish scalable onboarding and lifecycle-management patterns.
• Drive automation and self-service capabilities.
• Evaluate Secret Management technologies and integration approaches.
• Lead complex technical investigations and proof-of-concept activities.
• Provide technical guidance to application and infrastructure teams.
• Mentor engineers and establish engineering standards.
• Identify technology or architectural gaps proactively and initiate improvements.
• Balance strong security architecture with solutions that application teams can realistically consume.

Ready to embark on the journey? Here’s what we are looking for:

Technical background

We expect broad architecture and engineering experience across several of these areas:

• Enterprise Secret Management architecture.
• CyberArk Secrets Manager/Conjur, HashiCorp Vault or comparable platforms.
• Kubernetes/OpenShift architecture.
• CI/CD and DevSecOps architectures.
• Azure, AWS and/or GCP.
• Workload identity and machine-to-machine authentication.
• OIDC/OAuth and certificate-based authentication.
• PKI, certificates and cryptographic concepts.
• APIs and application integration.
• Infrastructure as Code.
• Automation and software engineering practices.
• Windows/Linux and enterprise infrastructure.
• PAM and broader identity-security architecture.
• Hybrid enterprise architecture.

Deep expertise in every listed technology is not expected. We value someone capable of quickly understanding unfamiliar technology, examining its implications and making sound engineering decisions.

The mindset we are looking for

We are looking for someone who:

Creates momentum

Does not wait for perfect requirements or detailed instructions before starting to investigate a problem.

Thinks beyond products

Sees Secret Management as an engineering and security capability, not merely a product that needs to be administered.

Challenges constructively

Can say"I don't think this approach will scale, and here is what I propose instead."

Deals well with ambiguity

Can take an unclear problem, structure it, identify options and move stakeholders toward a decision.

Has strong engineering curiosity

Naturally wants to understand how Kubernetes, cloud identity, CI/CD, authentication or another unfamiliar technology actually works.

Is pragmatic

Understands that the theoretically perfect architecture is not necessarily the best enterprise solution.

Multiplies others

Shares knowledge, mentors engineers and improves engineering practices beyond their own assignments.

Owns outcomes

Does not stop at producing architecture diagrams or recommendations. They care whether the solution is actually adopted and works.

An array of benefits for you:

• An extra week of holiday (25 days/year), 6 Self-sickness days, Full compensation for up to 10 days absence due to illness/year, Up to 3 additional personal paid days off for long-term service
• Annual bonus
• On-going professional & technical training and certifications
• Flexible working hours with home office possibilities (up to 3 days HO per week)
• Edenred Cafeteria program including fully covered lunch vouchers; pension/life insurance, medical membership
• Multisport card, Discounts with selected partners, Company events and Health Days, Fruit days, One-time maternity grant, Opportunity to buy Deutsche Post AG shares at a discount, and much more

If the role sounds interesting to you, please let us know and join us in delivering the future of DHL logistics!

In accordance with the legitimate interest of DHL IT Services, the candidate for this role shall provide a copy of his/her extract from criminal record.

This role may not be performed if the criminal record confirms that the employee has been lawfully convicted for the criminal offence:

against property;

in the area of processing of personal data and/ or breach of secrecy of correspondence;

any other criminal offence connected with the terrorism.