Platform DevOps Engineer – Privileged Access Management

About the role

We are looking for a Platform DevOps Engineer to join our Privileged Access Management team. You will help strengthen Telia's identity and security posture by supporting and evolving our PAM and Key Management platforms.

Key responsibilities

• Provide day‑to‑day support and maintenance for PAM and KMS platforms, ensuring stability, availability, and secure operation.
• Integrate IAM services (PAM, KMS, IdP, MFA) with applications, Active Directory, cloud services, Kubernetes, and CI/CD pipelines such as GitHub Actions.
• Monitor, troubleshoot, perform root‑cause analysis, and resolve incidents across IAM, PAM, and KMS environments, including on‑call duties.
• Implement and maintain access‑control, privileged‑access, and key‑management policies in line with standards like NIST, ISO 27001, and PCI DSS, supporting audits and risk mitigation.

Required profile

• Minimum 2 years of hands‑on experience supporting PAM and/or KMS solutions in production.
• Strong operational expertise with enterprise platforms such as CyberArk, Delinea, HashiCorp Vault, or Fortanix.
• Experience with CI/CD integration, directory services (Active Directory), and automation scripting (Python, PowerShell).
• Customer‑focused mindset with solid communication, stakeholder management, and problem‑solving abilities.

Required skills

• CyberArk, Delinea, HashiCorp Vault, Fortanix
• Key Management Systems (KMS)
• GitHub Actions or similar CI/CD tools
• Active Directory
• Kubernetes
• Python
• PowerShell
• SAML, OAuth 2.0, OpenID Connect (OIDC)