Technical IAM Infra Lead
Bpost
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Benefits offered by this job
Job summary
Bnode, the former bpostgroup, is seeking a Technical IAM Infrastructure Lead to own core identity infrastructure, directory services and PAM platforms across our international organisation. You will lead engineering, operations and continuous improvement of identity services, ensuring security, availability and performance.
We expect 10+ years in IT infra or cybersecurity, deep AD/Entra ID, PAM tech (CyberArk/BeyondTrust/Delinea), and a proven leadership track.
Qualifications
- Approximately 10+ years of experience in IT infrastructure, cybersecurity, IAM or enterprise platform engineering.
- Strong technical expertise in Active Directory, Microsoft Entra ID, directory services and hybrid identity environments.
- Solid experience with PAM technologies, ideally including CyberArk, BeyondTrust or Delinea.
- Proven experience designing, implementing and operating enterprise‑scale identity infrastructure and business‑critical platforms.
- Strong understanding of directory architecture, LDAP, Kerberos, authentication, identity federation and access management.
- Experience with privileged account management, credential vaulting, session management and privileged access controls.
- Strong knowledge of infrastructure automation, PowerShell, scripting, monitoring and Infrastructure as Code.
- Experience managing highly available infrastructure services, including disaster recovery, resilience, patching and lifecycle management.
- Proven ability to lead technical engineering teams and manage complex infrastructure and security initiatives.
- Experience working with technology vendors, implementation partners and managed services.
- Strong technical leadership, stakeholder management and problem‑solving skills.
- A degree in Computer Science, IT, Cybersecurity or equivalent professional experience.
- Fluent English. Dutch and/or French is an advantage.
Responsibilities
- Lead core identity infrastructure and directory services.
- Build and manage PAM capabilities across the organization.
- Drive architecture and engineering excellence for identity and PAM.
- Lead technical teams and technology partners.
Skills
Education
Tools
Job description
At Bnode (formerly bpostgroup), cybersecurity is a strategic priority. As we strengthen our Group-wide security capabilities, we are looking for an experienced Technical IAM Infrastructure Lead to take ownership of our core identity infrastructure, directory services and Privileged Access Management (PAM) platforms.
In this role, you will lead the engineering, operation and continuous improvement of business-critical identity services across our international organisation.
You will combine deep technical expertise in enterprise identity infrastructure with leadership of our PAM capability, ensuring that privileged access is secure, controlled and effectively monitored.
Working closely with the Group IAM Capability Lead, you will help build secure, resilient and scalable identity services that support our digital transformation.
- Own the engineering, operation and continuous evolution of enterprise identity infrastructure and directory services.
- Ensure the availability, security, resilience and performance of critical identity platforms.
- Oversee platform maintenance, upgrades, patching, monitoring, disaster recovery and lifecycle management.
- Drive automation, standardisation and continuous improvement of identity infrastructure operations.
- Lead the design, implementation, integration and operation of Group-wide PAM platforms and services.
- Translate the IAM strategy into technical roadmaps and engineering initiatives.
- Implement and optimise privileged account security, credential management, session monitoring and privileged access controls.
- Drive PAM adoption across infrastructure, cloud environments, applications and business units.
- Manage the PAM platform backlog, technical improvements and operational performance.
- Design and evolve secure, scalable and resilient identity infrastructure and PAM architectures.
- Support hybrid identity environments, directory integration, authentication and federation.
- Apply modern infrastructure engineering practices, including automation, Infrastructure as Code (IaC) and secure‑by‑design principles.
- Manage platform lifecycle, technical debt, service continuity and operational risks.
- Collaborate with WIAM, CIAM, Cloud, Infrastructure, SOC, Zero Trust and Enterprise Architecture teams.
- Manage multidisciplinary engineering and operational teams responsible for identity infrastructure and PAM services.
- Coordinate technical delivery, platform integrations and operational improvements.
- Oversee external technology vendors, implementation partners and managed service providers.
- Manage engineering budgets, platform costs, service performance and supplier relationships.
- Ensure high‑quality delivery while maintaining the stability of business‑critical identity services.
We are looking for an experienced technical leader with a strong background in enterprise identity infrastructure, directory services and Privileged Access Management.
- Approximately 10+ years of experience in IT infrastructure, cybersecurity, IAM or enterprise platform engineering.
- Strong technical expertise in Active Directory, Microsoft Entra ID, directory services and hybrid identity environments.
- Solid experience with Privileged Access Management (PAM) technologies, ideally including platforms such as CyberArk, BeyondTrust or Delinea.
- Proven experience designing, implementing and operating enterprise‑scale identity infrastructure and business‑critical platforms.
- Strong understanding of directory architecture, LDAP, Kerberos, authentication, identity federation and access management.
- Experience with privileged account management, credential vaulting, session management and privileged access controls.
- Strong knowledge of infrastructure automation, PowerShell, scripting, monitoring and Infrastructure as Code.
- Experience managing highly available infrastructure services, including disaster recovery, resilience, patching and lifecycle management.
- Proven ability to lead technical engineering teams and manage complex infrastructure and security initiatives.
- Experience working with technology vendors, implementation partners and managed services.
- Strong technical leadership, stakeholder management and problem‑solving skills.
- A degree in Computer Science, IT, Cybersecurity or equivalent professional experience.
- Fluent English. Dutch and/or French is an advantage.
Like a long‑awaited parcel, we want to make you feel welcome and valued. Our offer includes a competitive monthly salary, that goes without saying. On top of that, you can count on:
- Meal vouchers of €10 per working day
- Hospitalization-, group- and disability insurances
- A phone subscription, including 25GB data
- A flexible renumeration plan, which allows you to customize your own benefits. A company car, bike leasing, public transportation, extra days off,... the choice is yours
- Possibility to enter the Federal Mobility plan
- Work/life balance, thanks to flexible working hours and the possibility to work from home
- 20 days of statutory leave and 7 additional extralegal days off
- An end‑of‑year and performance‑based bonus and double holiday pay
- Many benefits from more than 100 Bpost‑partners
#Bpost #Bnode #LI-BP6
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
