Enterprise Security Architect – Identity and Access Management (m/f/d)

The Security Architecture department is part of the Group Chief Information Security Office, which protects DHL Group against cyber-attacks and strengthens the Group’s activities in the field of cybersecurity. It covers the relevant technological aspects and is responsible for the domain-specific development and further enhancement of a Group-wide security architecture, with the goal of ensuring and continuously improving IT security and cyber resilience for DHL Group.
Senior Expert (m/f/d) 085‑5 / AT nltd Level 2 (BesGr A 14/A 15)
IT Security Senior Specialist (m/f/d)
Key Responsibilities
Identify external and internal threat scenarios for the Group and develop cross‑functional solutions - including technological measures and strategic roadmaps - to ensure a unified, Group‑wide security architecture
Analysis of cybersecurity IAM trends relevant to DHL Group (e.g., regulations, technology developments e.g. AI, Cloud, NHI).
Creation of IAM specific risk assessments as part of the technical security architectures design work (cost, benefit, risk reduction, etc.).
Evaluation of IAM specific threat scenarios relevant to DHL Group and the development of a IAM security architecture including target state, gap and risk analysis, and roadmaps.
Development of high-level IAM security architectures — from requirements gathering to roadmaps.
Definition of IAM-related security standards and security baselines.
Development of reusable security architecture artefacts (patterns, blueprints).
Continuous stakeholder management with business and experts representatives to identify action areas (e.g., EIAM – Cloud, On-Premise, CIAM, etc. ) and develop security solutions.
Steer solution design and implementation as a Subject Matter Expert.
Exchange, align, and present within Group-wide working groups, business divisions, and IT security forums.
Assess and validate the current IT infrastructure security posture vs. industry best practices, guidelines and threats.
Provide recommendation to improve security and reduce risks.
Propose improvements based on best practices (e.g., based on ISO or NIST).
Professional Requirements
Completed university degree, preferably in Computer Science or comparable qualification.
Many years of relevant professional experience in the Identity and Access management domain, preferably proven experience delivering IAM architecture in large organizations.
Excellent knowledge and experience in security architecture roles – developing technology-specific and enterprise-level security architecture (target state, roadmaps).
Experience in the architecture and design of IAM solutions with deep technical and preferably with the following technologies (or similar technologies)
Cloud and On-premises IAM solutions such as Microsoft Entra ID, Intune, AppProxy, Active directory, Google Cloud Identity, Ping Identity, Okta.
PAM solutions such as Cyber Ark / BeyondTrust
IGA solutions such as SailPoint / Oracle OIG
Identity Federation, SSO and MFA, passwordless (FIDO2)
AuthZ and AuthN technologies and protocols (SAML, OAuth2, OIDC, Kerberos)
Zero Trust Architecture (NIST 800-207 or similar)
Deep understanding of attackers’ mindset and offensive security, preferably offensive security training (OSCP+/ CEH or similar)
Very good English language skills, German language skills is an advantage
Personal Requirements
Strong analytical and conceptual skills.
Excellent communication and presentation skills.
Strong team orientation and excellent relationship-building skills.
High degree of adaptability to different working styles and cultures.
Integrity and loyalty.
Notes for Applicants:
Please apply with your complete documents (resume, cover letter, and certificates) online via the application link in the job posting.
Contact persons: Christian Klenner, Telefon +49 (0)
We welcome applications from all individuals – regardless of age, gender, origin, religion, or physical characteristics.
Severely disabled individuals and those with equal status will be given preference when qualifications are equal.