Solution Engineer specialized in PAM

Tdc Net; Aarhus; On-site; DKK 650,000 - 950,000; Full time

Job summary

TDC NET is seeking a Solution Engineer for Privileged Access Management (PAM) & Identity Infrastructure in Denmark. You will design, implement, and operate IAM/PAM solutions across on-prem, cloud, and OT, integrating with AD, Entra ID, PKI, and automation practices.

You will collaborate with Infrastructure, Security, Platform Engineering, and App teams to automate identity services and enhance security controls using modern IaC and scripting.

Qualifications

• 4+ years IAM/PAM or security infrastructure experience.
• Extensive experience with Active Directory, Entra ID, LDAP, and Group Policy.
• Strong PKI knowledge including TLS/SSL and certificate lifecycle management.
• Experience with Keycloak, HashiCorp Vault, Ping or equivalent platforms.
• Hands-on with Delinea PAM, HashiCorp Boundary, or similar privileged access solutions.
• Solid understanding of Kerberos, LDAP, SAML, OAuth 2.0, OIDC, and RADIUS.
• Experience in regulated enterprise environments and audits.
• Troubleshooting across Windows, Linux, and enterprise infrastructure.
• Strong analytical, problem-solving, and stakeholder management skills.

Responsibilities

• Design, implement, configure, and maintain enterprise PAM solutions.
• Integrate servers, applications, databases, devices into PAM ecosystem.
• Manage and support Microsoft Active Directory, Entra ID, LDAP, MFA.
• Support and maintain PKI, including certificate lifecycle management.
• Automate PAM and identity-related processes using IaC and scripting.
• Monitor platform performance, troubleshoot issues, improve stability and security.
• Identify security risks and implement mitigations aligned with security standards.
• Provide technical guidance across engineering teams.

Skills

IAM/PAM

Active Directory

Entra ID

PKI

Keycloak

HashiCorp Vault

Terraform

Git

Azure DevOps

Kubernetes

PowerShell

Python

Linux

Education

Bachelor's degree in a related field

Tools

Terraform

Git

Azure DevOps

GitHub Actions

Docker

Kubernetes

Job description

As a Solution Engineer – Privileged Access Management (PAM) & Identity Infrastructure at TDC NET, you will play a key role in designing, implementing, and operating enterprise Identity and Privileged Access Management solutions. You will be responsible for securing privileged access across infrastructure, applications, cloud platforms, and operational technology while ensuring seamless integration with Active Directory, Microsoft Entra ID, PKI, and modern automation practices.

About The Job

Working closely with Infrastructure, Security, Platform Engineering, and Application teams, you will help automate identity services, improve security controls, and improve operational efficiency through Infrastructure-as-Code and modern engineering practices.

Your Responsibilities Will Include

• Design, implement, configure, and maintain enterprise PAM solutions.
• Integrate servers, applications, databases, network devices, and cloud platforms into the PAM ecosystem.
• Manage and support Microsoft Active Directory, Entra ID , LDAP, MFA and related identity services.
• Support and maintain Public Key Infrastructure (PKI), including certificate lifecycle management, and secure authentication mechanisms.
• Automate PAM and identity-related processes using Infrastructure-as-Code and scripting.
• Monitor platform performance, troubleshoot complex technical issues, and continuously improve platform stability and security.
• Identify security risks and implement mitigation strategies aligned with enterprise security standards.
• Provide technical guidance and knowledge sharing across engineering teams.

We are building more than an IAM platform. We are building a modern identity engineering capability. If you enjoy solving complex security challenges, driving automation, and making a real impact, you'll fit right in with our team.

– Abhishek Kumar, Senior Manager – Identity & Access Management, TDC NET

About You

You are passionate about Identity & Access Management, infrastructure security, and automation. You enjoy solving complex technical challenges and continuously improving enterprise security platforms through modern engineering practices.

You thrive in collaborative environments where Security, Infrastructure, Cloud, and DevOps come together to build secure and scalable identity services.

Required Qualifications

• 4+ years of experience working with Identity & Access Management (IAM), Privileged Access Management (PAM), or Security Infrastructure.
• Extensive experience with Microsoft Active Directory, Entra ID, Group Policy, LDAP, and key authentication technologies.
• Solid understanding & experience with Public Key Infrastructure (PKI), certificate lifecycle management, TLS/SSL, and authentication mechanisms
• Experience with Keycloak, Hashicorp vault , Ping or equivalent platforms
• Practical experience implementing, configuring, and supporting Delinea Privileged Access Management (PAM), HashiCorp Boundary, or equivalent privileged access solutions.
• Solid understanding of authentication and authorization protocols such as Kerberos, LDAP, SAML, OAuth 2.0, OpenID Connect (OIDC), and RADIUS.
• Experience operating in highly regulated enterprise settings, with a solid graspof security frameworks, compliance requirements, and audit controls.
• Extensive troubleshooting skills across Windows, Linux, and enterprise infrastructure.
• Advanced analytical, problem-solving, and stakeholder management skills, with the ability to communicate complex technical concepts to both technical and non-technical audiences.
• Applicants are required to meet the criteria for submitting a security clearance application.

Good to Have

• Experience working with HashiCorp Vault for secrets management and privileged credential management.
• Experience using Terraform for Infrastructure-as-Code (IaC) and automation.
• Experience using Git and modern version control workflows.
• Experience with CI/CD platforms such as Azure DevOps, GitHub Actions, or similar DevOps pipelines.
• Experience with PowerShell, Bash, or Python scripting for automation and operational tasks.
• Familiarity with container platforms such as Docker or Kubernetes.

What We Offer

At TDC NET, you'll join a collaborative engineering team focused on building and operating modern Identity and Privileged Access Management services that protect critical infrastructure and enable secure digital transformation.

You'll have the opportunity to work with modern IAM technologies, automation, Infrastructure-as-Code, and cloud identity services while influencing technical direction and helping shape the future of our identity engineering capabilities.

If solving challenging security issues and improving identity, automation, and privileged access sounds appealing, we'd be happy to hear from you.

Contact

If you have questions about the position or want to know more about what it means to work at TDC NET, feel free to reach out to Abhishek Kumar, Senior Manager-IAM, on [e-mail].

We look forward to reviewing your application and potentially welcoming you to our team at TDC NET.

Location

Teglholmsgade 1, Copenhagen or Sletvej 30, Aarhus

Process

No later than 3 November 2026.

You can expect to hear from us within 3 weeks from the application date.

We encourage you not to include a photo in your CV or cover letter.

In TDC NET we are dedicated to fostering an inclusive culture that values diversity, and we pride ourselves on providing equal opportunities for everyone. All qualified candidates will be assessed regardless of ethnicity, religion, gender, gender identity, sexual orientation, disability and all the other characteristics that make us different.

We are looking forward hearing from you!

TDC NET - Lots Of Benefits

The green transition needs a strong digital infrastructure. With us you will take part in delivering the technological solutions.

Our values #TDCNET