Expert in Privileged Access Management

**Senior Expert Privileged Access Management (PAM) (Luxembourg, onsite) EU Public Bodies**

**Role Overview**

The European Commission’s Directorate-General for Digital Services (DIGIT), Unit DIGIT.C.3 “Data Centres & Private Cloud”, is seeking a **Senior Expert in Privileged Access Management (PAM)** to support the design, implementation, operation, and continuous improvement of the Commission’s PAM services within a hybrid environment (on-premises and cloud).
The consultant will guide internal teams and an external managed services provider throughout the lifecycle of the PAM platform to ensure secure, reliable, and highly available solutions that align with Zero Trust principles.

**Key Responsibilities**

- Provide expert technical assistance on PAM solutions and Zero Trust Architecture, including integration with related services such as OSs, VPNs, IdPs, Security Token Services, hosting platforms, containerised environments and other security components.
- Oversee and coordinate projects related to PAM operations within the Data Centres & Private Cloud Unit.
- Collaborate with business service owners, external managed service teams and technical stakeholders to design and implement strategic improvements.
- Develop strategic roadmaps for the PAM service and contribute to long-term technology direction.
- Continuously monitor, tune, and proactively maintain PAM systems for performance and availability.
- Guarantee high security, operational excellence, proper documentation and compliance with DIGIT and third-party processes.
- Manage and supervise services delivered within the external managed services portfolio.
- Participate in project meetings, requirements gathering, service governance and reporting activities.
- Ensure service reliability and integrate feedback for continuous improvement.
- Support the definition of strategic direction for Linux Hosting Services and related IT services.
- Produce high-quality technical documentation, meeting minutes, reports and deliverables.

**Required Qualifications & Experience**

- University degree (EQF Level 7 master equivalent) OR bachelor-level degree (EQF Level 6) plus additional relevant professional experience.
- **Minimum 10 years** combined experience in Datacenter Infrastructure, OS management and IT Operational Security (including PAM, Secret Management and/or Crypto Services).
- **Minimum 5 years** delivering and supervising IT Security Operational Services such as PAM and Secret Management, including automation.
- Proven experience producing technical documentation.
- Strong background working in multicultural and international organisations.
- Excellent service-oriented and teamwork skills.
- Ability to obtain required **security clearance**.

**Required Certifications**

- Certification in a **Secret Management Platform**
- **Windows Certified Systems Engineer**
- **ITIL Foundation Certified**

**Technical & Professional Skills**

- Expert knowledge of PAM and Zero Trust architectures.
- Experience with PrivX is an asset.
- Familiarity with integration across cloud and on-prem infrastructures.
- Strong governance, monitoring and troubleshooting capabilities.
- Proficient in stakeholder engagement and project coordination.
- Fluency in **English (minimum CEFR B2)**, spoken and written.

**Work Environment & Conditions**

- **On-site position in Luxembourg**, with up to two days per week remote work upon authorisation.
- Telework must allow reaching premises within 2 hours by ground transportation.
- Participation in occasional on-call and extended hours activities may be required.
- Weekly progress reports and monthly timesheets are mandatory.