Solution Engineer specialized in PAM

TDC A/S; København; Hybrid; DKK 700,000 - 900,000; Full time

Job summary

TDC NET is seeking a Solution Engineer specialized in Privileged Access Management (PAM) to design, implement, and operate enterprise IAM solutions. You will secure privileged access across infrastructure, applications, cloud platforms, and OT, with integration to AD, Entra ID, PKI, and automation.

You will collaborate with Infrastructure, Security, Platform Engineering, and Applications teams to automate identity services and improve security controls using IaC and modern engineering practices.

Qualifications

• Experience with IAM/PAM in enterprise environments.
• Strong knowledge of AD/Entra ID, LDAP and certificate services.
• Experience with PKI, TLS/SSL and authentication mechanisms.

Responsibilities

• Design, implement, configure, and maintain enterprise PAM solutions.
• Integrate servers, applications, databases, network devices, and cloud platforms into the PAM ecosystem.
• Manage and support Active Directory, Entra ID, LDAP, MFA and related identity services.
• Support and maintain PKI, including certificate lifecycle management and secure authentication mechanisms.
• Automate PAM and identity-related processes using IaC and scripting.
• Monitor platform performance, troubleshoot issues, and improve stability and security.
• Identify security risks and implement mitigation aligned with security standards.
• Provide technical guidance and knowledge sharing across engineering teams.

Skills

IAM / PAM expertise

Active Directory / Entra ID

PKI / TLS

Authentication protocols (Kerberos, S/

IT security in regulated environments

Windows & Linux troubleshooting

Automation / IaC (Scripting)

Communication / Stakeholder mgmt

Tools

Keycloak

HashiCorp Vault

Delinea PAM

Terraform

Git / GitHub Actions

Azure DevOps

PowerShell

Docker / Kubernetes

Job description

Solution Engineer specialized in PAM

As a Solution Engineer – Privileged Access Management (PAM) & Identity Infrastructure at TDC NET, you will play a key role in designing, implementing, and operating enterprise Identity and Privileged Access Management solutions. You will be responsible for securing privileged access across infrastructure, applications, cloud platforms, and operational technology while ensuring seamless integration with Active Directory, Microsoft Entra ID, PKI, and modern automation practices.

About the job

Working closely with Infrastructure, Security, Platform Engineering, and Application teams, you will help automate identity services, improve security controls, and improve operational efficiency through Infrastructure-as-Code and modern engineering practices.

Your responsibilities will include:

• Design, implement, configure, and maintain enterprise PAM solutions.
• Integrate servers, applications, databases, network devices, and cloud platforms into the PAM ecosystem.
• Manage and support Microsoft Active Directory, Entra ID , LDAP, MFA and related identity services.
• Support and maintain Public Key Infrastructure (PKI), including certificate lifecycle management and secure authentication mechanisms.
• Automate PAM and identity-related processes using Infrastructure-as-Code and scripting.
• Monitor platform performance, troubleshoot complex technical issues, and continuously improve platform stability and security.
• Identify security risks and implement mitigation strategies aligned with enterprise security standards.
• Provide technical guidance and knowledge sharing across engineering teams.

"We are building more than an IAM platform. We are building a modern identity engineering capability. If you enjoy solving complex security challenges, driving automation, and making a real impact, you'll fit right in with our team."

– Abhishek Kumar, Senior Manager – Identity & Access Management, TDC NET

About you

You are passionate about Identity & Access Management, infrastructure security, and automation. You enjoy solving complex technical challenges and continuously improving enterprise security platforms through modern engineering practices.

You thrive in collaborative environments where Security, Infrastructure, Cloud, and DevOps come together to build secure and scalable identity services.

Required Qualifications

• 4+ years of experience working with Identity & Access Management (IAM), Privileged Access Management (PAM), or Security Infrastructure.
• Extensive experience with Microsoft Active Directory, Entra ID, Group Policy, LDAP, and key authentication technologies.
• Solid understanding & experience with Public Key Infrastructure (PKI), certificate lifecycle management, TLS/SSL, and authentication mechanisms
• Experience with Keycloak, Hashicorp vault , Ping or equivalent platforms
• Practical experience implementing, configuring, and supporting Delinea Privileged Access Management (PAM), HashiCorp Boundary, or equivalent privileged access solutions.
• Solid understanding of authentication and authorization protocols such as Kerberos, LDAP, SAML, OAuth 2.0, OpenID Connect (OIDC), and RADIUS.
• Experience operating in highly regulated enterprise settings, with a solid graspof security frameworks, compliance requirements, and audit controls.
• Extensive troubleshooting skills across Windows, Linux, and enterprise infrastructure.
• Advanced analytical, problem-solving, and stakeholder management skills, with the ability to communicate complex technical concepts to both technical and non-technical audiences.
• Applicants are required to meet the criteria for submitting a security clearance application.

Good to Have

• Experience working with HashiCorp Vault for secrets management and privileged credential management.
• Experience using Terraform for Infrastructure-as-Code (IaC) and automation.
• Experience using Git and modern version control workflows.
• Experience with CI/CD platforms such as Azure DevOps, GitHub Actions, or similar DevOps pipelines.
• Experience with PowerShell, Bash, or Python scripting for automation and operational tasks.
• Familiarity with container platforms such as Docker or Kubernetes.

What We Offer

At TDC NET, you'll join a collaborative engineering team focused on building and operating modern Identity and Privileged Access Management services that protect critical infrastructure and enable secure digital transformation.

You’ll have the opportunity to work with modern IAM technologies, automation, Infrastructure-as-Code, and cloud identity services while influencing technical direction and helping shape the future of our identity engineering capabilities.

If solving challenging security issues and improving identity, automation, and privileged access sounds appealing, we'd be happy to hear from you.

Contact:

If you have questions about the position or want to know more about what it means to work at TDC NET, feel free to reach out to Abhishek Kumar, Senior Manager-IAM, on [e-mail].

We look forward to reviewing your application and potentially welcoming you to our team at TDC NET.

In TDC NET we are dedicated to fostering an inclusive culture that values diversity, and we pride ourselves on providing equal opportunities for everyone. All qualified candidates will be assessed regardless of ethnicity, religion, gender, gender identity, sexual orientation, disability and all the other characteristics that make us different.

Location:

Teglholmsgade 1, Copenhagen or Sletvej 30, Aarhus

TDC NET - lots of benefits

Engage in meaningful work

The green transition needs a strong digital infrastructure. With usyou will take part in delivering the technological solutions.
Forall of us.

We provide the working life of the future

Weset targets for a healthy and safe working environment.
Our work culture is digital and flexible when compatible with tasksand colleagues.
Welcome to your new hybrid workplace.

Development through challenges - get lots of responsibilityfrom day one

Get responsibility quickly and be a part of the biggest transformation in our field - ever.
Bechallenged.

Become part of a strong network

Takepart in connecting Denmark together with both new and experiencedcolleagues and many various professional competencies.
InTDC NET we are both motivated and united by a strong network.