IT Security Engineer/Solution Architect | B2B Contract

Intro About Danske Bank Group Security Organization.

The Security organization, headed by the Office of the CSO, delivers high-quality security and risk solutions to Danske Bank Group and its customers. Security works on complex technical initiatives and helps strengthen the Group’s global competitive edge through innovative risk-mitigating solutions.

Senior IT Security Engineer/Solution Architect for EPAM Project for Cyber Operations within Security, Risk & Control.

We are seeking a Senior Endpoint Privileged Access Management (EPAM) Engineer / Solution Architect to support the evaluation, procurement, implementation, integration, and operation of Danske Bank’s future EPAM platform.

The successful candidate will be a subject matter expert in EPAM and will play a key role across the full lifecycle of the platform, including vendor assessments, proof of concepts, technical design, implementation, enterprise rollout, and handover to business-as-usual operations.

Responsibility for building EPAM platform for the Danske Bank Group:

• Participate in EPAM solution evaluation, proof of concepts, and RFP activities.
• Support the design phase and help build and implement the selected EPAM solution.
• Ensure architectural compliance with the target enterprise architecture.
• Stay at the forefront of technological development to ensure high efficiency and solution quality.
• Participate in security consultancy activities and cyber assessments.
• Build and maintain an end-to-end Confluence engineering repository, including links to relevant integration parties.
• Configure privilege elevation, application control, and least privilege policies.
• Integrate the platform with Entra ID, Active Directory, Intune, Defender, ServiceNow, SIEM, and PAM solutions.
• Create, link, and maintain technical tasks in Jira.
• Collaborate with architects and related functions to design and deliver the solution.
• Build strong relationships with teams and stakeholders to enable effective technical dialogue across related functions.
• Support endpoint onboarding, migration, testing, and production rollout.
• Develop automation using PowerShell and APIs.
• Provide L3 support, troubleshooting, and platform optimization.
• Create operational documentation and materials for knowledge sharing and information sessions.
• Act as the EPAM subject matter expert and support audit, risk, and compliance requirements.

Specific must-have skills:

• More than 5 years of experience in endpoint security, endpoint management, access management, and security engineering.
• Hands-on experience with at least one EPAM solution, such as CyberArk EPM, BeyondTrust EPM, Delinea, Saviynt, or similar.
• Strong knowledge of Windows administration and endpoint security.
• Experience integrating security platforms using APIs and automation.
• Strong understanding of PAM, least privilege, RBAC, and Zero Trust principles.
• Excellent troubleshooting, communication, and documentation skills.
• A team-oriented player who has outstanding communication skills and has worked with both on-site and off-site development teams.
• Fluent in the English language verbally and in writing, with great communication skills for different target audiences.
• Experience in software lifecycle development and software/applications development (in security areas would be an advantage).
• Experienced user of Jira and Confluence.

Advantage:

• Experience in financial services or highly regulated environments.
• Experience with Privilege Access Management, Secrets Management, Access Management, Authentication Provider.
• Experience participating in the design and implementation of enterprise PAM or EPAM solutions.
• Experience delivering large-scale security transformations in complex enterprise environments.
• Knowledge of NIST, CIS Controls, ISO 27001, and PCI DSS.

We Offer:

• An inspiring environment in a large IT organization.
• Work in an international team that concentrates on innovative business-facing solutions.

Consultant is needed for a hybrid work model 3 + days in the Vilnius office, the contract is likely to be extended.