Careers
Careers at XELANED
You do not want to disappear in the crowd of a large corporation, but truly make an impact—with visible results and an environment in which your performance is recognized and appreciated? Then you will fit in very well with us. At XELANED, you can expect no rigid structures and no “number in the system,” but a team that sticks together, supports one another, and values each person with their individual strengths.We know: We can only succeed together.
You may know this feeling: you give a lot, take on responsibility, and continue developing professionally—yet in the end it feels like your contribution gets lost in day-to-day business. We want it to be different here. We create room for real growth: projects where you can expand your expertise, try new things, and take on more responsibility step by step. Your career path should not be left to chance, but be planable—with clear prospects and the opportunity to specialize in a way that matches your goals and talents.
Just as important to us as professional development is how we work together. We foster a warm, team-oriented atmosphere where people can rely on one another—not only when everything is going smoothly, but especially when things get challenging. Openness, respect, and fairness are not empty phrases for us; they are the foundation of our collaboration. That also means we see you as a person: with your strengths, your ideas, your ambitions—and with what matters to you in life.
If you are not just looking for “any job,” but a place where you can build a long-term future, a workplace where team spirit is lived instead of mandated—and where you can actively shape your career instead of merely fitting into processes—then you are in the right place with us.
THE JOB
- ✓Administration and operation of Microsoft Active Directory Certificate Services (AD CS) on Windows Server 2025/2022: CA hierarchies, templates, AIA/CDP, CRL/OCSP
- ✓Operation and further development of Keyfactor Command as a Certificate Lifecycle Management (CLM) platform: inventory, policies, workflows, automation, and connectors
- ✓Integration and operation of Entrust nShield HSMs (e.g., nShield Connect/Solo): key ceremonies, backup/recovery, firmware and health checks, HSM-backed CA keys
- ✓Certificate automation for platforms and workloads: ACME/REST, SCEP/NDES, cert-manager/Kubernetes, IIS/NGINX/Apache, as well as load balancers/reverse proxies
- ✓Operations troubleshooting: chain/trust topics, mTLS/TLS handshakes, enrollment issues, renewal/revocation workflows—including root-cause analysis and remediation
- ✓Documentation, change and incident processes (runbooks, operations handovers), plus monitoring/reporting (e.g., certificate expiry, CA health, audit evidence)
Project examples:
- ✓EAP-TLS for Network Access Control (NAC): certificate profiling, NDES/SCEP or Intune SCEP, CRL/OCSP chains, rollout and operations.
- ✓Remote access/VPN with certificate-based authentication (user/device), including template design, auto-enrollment, and clean renewal processes.
- ✓Automated TLS certificates for web servers/reverse proxies/Kubernetes ingress (ACME/cert-manager), including monitoring, expiry alerts, and incident runbooks.
YOU
- ✓Several years of hands-on experience operating PKI/AD CS (templates, enrollment, revocation, OCSP/CRL) and a solid understanding of X.509, TLS/mTLS, and PKI trust models
- ✓Experience with CLM/automation platforms—ideally Keyfactor Command (alternatively EJBCA/SignServer or comparable tools)
- ✓Hands-on know-how with HSMs, preferably Entrust nShield; terms/standards such as PKCS#11, CNG/KSP, JCE, and key backup are familiar
- ✓Confident use of PowerShell and APIs (REST); enthusiasm for automation (Git, CI/CD, IaC/Ansible/Terraform is a plus)
- ✓Structured approach to troubleshooting (openssl/certutil/Wireshark), clean documentation, and willingness to participate in on-call duty by arrangement
- ✓Good German language skills and sufficient English for documentation, vendor tickets, and technical coordination
WE
- ✓With us, you can define your professional focus yourself—based on your skills and preferences
- ✓We do not just want to offer the best to our customers, but also to our employees: with us, you can actively work on your career. Your professional advancement matters to us—from administrator to consultant? No problem!
- ✓We work with a bonus system—those who contribute are rewarded with top-level compensation
- ✓Continuous learning is a priority at XELANED—around 4 weeks per year are planned for each employee as fixed, paid training time (including certification through our XELANED Academy)
- ✓In addition, we maintain a virtual test environment in Nuremberg where our employees can put their ideas into practice
- ✓We live flat hierarchies and self-organized work; there is no boss looking over your shoulder every day—you are responsible for your projects
- ✓We value team building: regular company events and outings help you get to know your colleagues better outside of daily work as well
- ✓We always try to accommodate our employees’ preferences for the ideal place of work: do you want to travel frequently and occasionally go abroad? Or would you rather work close to where you live? At XELANED, both are possible!
- ✓There is no one-size-fits-all workday with us; every customer and every assignment is unique—and because our customers come from many different industries, you get to know them through your work
- ✓Benefits such as a laptop and mobile phone are also part of the XELANED GmbH package—as is an individual company car after a certain period of service
THE JOB
- ✓Design, implementation, and modernization of enterprise PKI and CLM solutions: trust and CA design, policies/CPS, key management, and operating models
- ✓Introduction and expansion of Keyfactor Command (CLM), including connection to AD CS and integration into request, approval, renewal, and compliance processes
- ✓Design and integration of HSM-backed CAs with Entrust nShield (e.g., key ceremonies, HA/DR, role/permission concepts, auditability)
- ✓Automation for applications and platforms: ACME, cert-manager/Kubernetes, service mesh/mTLS, API gateways, load balancers—including standards and guardrails
- ✓Migrations from legacy PKI/tooling, consolidation of CA landscapes, reduction of certificate risks (expiry/shadow IT), and creation of a reliable inventory
- ✓Workshops, architecture/security reviews, technical documentation (HLD/LLD), handover to operations, and coaching for admin teams
Project examples:
- ✓Design/migration of a CA hierarchy (root/issuing), template governance, AIA/CDP strategy, hardening, and audit readiness.
- ✓Introduction of certificate lifecycle management with Keyfactor Command: inventory, policy baselines, and automation of enrollment/renewal/revocation across platforms.
- ✓Securing signature workflows (code signing / document signing) with HSM backends (e.g., Entrust nShield) and clear approval/role concepts.
YOU
- ✓Several years of project experience in PKI/CLM (architecture or implementation) and the ability to translate requirements into technical designs and operating processes
- ✓Very strong understanding of X.509, TLS/mTLS, certificate profiles, revocation strategies, and common protocols/flows (ACME, SCEP/EST)
- ✓Experience with Keyfactor (Command, ideally also EJBCA/SignServer) and/or Entrust technologies (PKI environments, nShield HSM)
- ✓Technical foundation in Microsoft infrastructures (Windows Server 2025/2022, AD/Entra ID) and optionally cloud/hybrid (Azure) for modern deployments
- ✓Automation mindset: PowerShell/Python, APIs, Git, CI/CD; IaC (Terraform/Ansible) and containers/Kubernetes are clear pluses
- ✓Certifications are welcome (e.g., Microsoft Security/Azure or vendor-specific), but proven project results matter more
WE
- ✓With us, you can define your professional focus yourself—based on your skills and preferences
- ✓We do not just want to offer the best to our customers, but also to our employees: with us, you can actively work on your career. Your professional advancement matters to us—from administrator to consultant? No problem!
- ✓We work with a bonus system—those who contribute are rewarded with top-level compensation
- ✓Continuous learning is a priority at XELANED—around 4 weeks per year are planned for each employee as fixed, paid training time (including certification through our XELANED Academy)
- ✓In addition, we maintain a virtual test environment in Nuremberg where our employees can put their ideas into practice
- ✓We live flat hierarchies and self-organized work; there is no boss looking over your shoulder every day—you are responsible for your projects
- ✓We value team building: regular company events and outings help you get to know your colleagues better outside of daily work as well
- ✓We always try to accommodate our employees’ preferences for the ideal place of work: do you want to travel frequently and occasionally go abroad? Or would you rather work close to where you live? At XELANED, both are possible!
- ✓There is no one-size-fits-all workday with us; every customer and every assignment is unique—and because our customers come from many different industries, you get to know them through your work
- ✓Benefits such as a laptop and mobile phone are also part of the XELANED GmbH package—as is an individual company car after a certain period of service
THE JOB
- ✓Administration of Microsoft platforms (Windows Server 2025/2022 and Windows 11)—on-premises and hybrid
- ✓Microsoft 365: Exchange Online, SharePoint Online, and Teams (operations and troubleshooting)
- ✓Identity & access: Active Directory (AD DS) and Microsoft Entra ID (including hybrid identity/Entra Connect)
- ✓Endpoint management: Microsoft Intune (policies, compliance, app deployment) and Windows Autopilot
- ✓Security & monitoring: Microsoft Defender (e.g., Defender for Endpoint) and basic logging/alerting
- ✓Automation and standardization with PowerShell (optionally Azure Automation)
- ✓Maintenance and further development of the managed infrastructure
- ✓Technical concepts, operating manuals, and documentation—including coordination/presentation with the customer
- ✓Troubleshooting in incident situations and participation in 2nd/3rd-level support
Project examples:
- ✓Rollout of Intune for Windows/macOS/iOS/Android, including compliance policies, app deployment, and the device lifecycle (enrollment to offboarding).
- ✓Standardized device onboarding via Autopilot (zero-touch), including baselines, BitLocker policies, and Defender onboarding.
- ✓Ransomware resilience on endpoints: Defender for Endpoint policies, Attack Surface Reduction, Controlled Folder Access, and continuous health monitoring.
YOU
- ✓Training as an IT specialist for system integration, state-certified technician, or a comparable qualification
- ✓Practical experience with Windows Server, Active Directory, and Microsoft 365 (hybrid environments)
- ✓Basic knowledge of Microsoft Entra ID and Intune is an advantage (or willingness to learn)
- ✓Confident use of PowerShell and structured troubleshooting
- ✓Willingness to work outside regular hours when needed (e.g., on-call duty)
- ✓Very good German and good English skills
WE
- ✓With us, you can define your professional focus yourself—based on your skills and preferences
- ✓We do not just want to offer the best to our customers, but also to our employees: with us, you can actively work on your career. Your professional advancement matters to us—from administrator to consultant? No problem!
- ✓We work with a bonus system—those who contribute are rewarded with top-level compensation
- ✓Continuous learning is a priority at XELANED—around 4 weeks per year are planned for each employee as fixed, paid training time (including certification through our XELANED Academy)
- ✓In addition, we maintain a virtual test environment in Nuremberg where our employees can put their ideas into practice
- ✓We live flat hierarchies and self-organized work; there is no boss looking over your shoulder every day—you are responsible for your projects
- ✓We value team building: regular company events and outings help you get to know your colleagues better outside of daily work as well
- ✓We always try to accommodate our employees’ preferences for the ideal place of work: do you want to travel frequently and occasionally go abroad? Or would you rather work close to where you live? At XELANED, both are possible!
- ✓There is no one-size-fits-all workday with us; every customer and every assignment is unique—and because our customers come from many different industries, you get to know them through your work
- ✓Benefits such as a laptop and mobile phone are also part of the XELANED GmbH package—as is an individual company car after a certain period of service
THE JOB
- ✓Planning, implementation, and operation of Microsoft 365 and Azure solutions (hybrid and cloud-native)
- ✓Identity & Access: Microsoft Entra ID (Conditional Access, MFA, PIM) as well as Active Directory integration
- ✓Modern Workplace: Microsoft Intune, Windows 11, Autopilot, and endpoint security baselines
- ✓Security: Microsoft Defender (e.g., Defender for Endpoint) and—depending on the project—Microsoft Sentinel
- ✓Design, migration, and optimization of customer environments, including workshops and documentation
- ✓Analysis of requirements, creation of solution concepts, and technical project implementation
- ✓Troubleshooting, knowledge transfer, and support in 2nd/3rd level for complex cases
Project examples:
- ✓Make MFA mandatory and block legacy protocols (e.g., Basic Auth), including Conditional Access design and rollout plan.
- ✓Establish privileged access with Entra ID PIM: role model, just-in-time access, approval flows, and auditable controls.
- ✓Security monitoring with Microsoft Sentinel: connect data sources, define detection use cases, and build initial analytic rules/playbooks.
YOU
- ✓Degree (e.g., computer science/business informatics) or training as an IT specialist, or a comparable qualification
- ✓Excellent expertise in one focus area: Microsoft 365, Azure, Identity, or Security
- ✓Solid knowledge of Active Directory and hybrid identity concepts
- ✓Current Microsoft certifications (e.g., AZ-104, AZ-305, SC-300, SC-200, MD-102), or willingness to obtain them
- ✓Very good German and English skills, and enjoyment of consulting and customer interaction
- ✓Desirable: experience in project management/ITSM (e.g., PRINCE2, ITIL)
WE
- ✓With us, you can define your professional focus yourself—based on your skills and preferences
- ✓We do not just want to offer the best to our customers, but also to our employees: with us, you can actively build your career. Your professional growth matters to us—from consultant to team lead? No problem!
- ✓We work with a bonus system—those who contribute are rewarded with top-level compensation
- ✓Continuous learning is a priority at XELANED—around 4 weeks per year are planned for each employee as fixed, paid training time (including certification through our XELANED Academy)
- ✓In addition, we maintain a virtual test environment in Nuremberg where our employees can put their ideas into practice
- ✓We live flat hierarchies and self-organized work; there is no boss looking over your shoulder every day—you are responsible for your projects
- ✓We value team building: regular company events and outings help you get to know your colleagues better outside of daily work as well
- ✓We always try to accommodate our employees’ preferences for the ideal place of work: do you want to travel frequently and occasionally go abroad? Or would you rather work close to where you live? At XELANED, both are possible!
- ✓There is no one-size-fits-all workday with us; every customer and every assignment is unique—and because our customers come from many different industries, you get to know them through your work
- ✓Benefits such as a laptop and mobile phone are also part of the XELANED GmbH package—as is a company car after a certain period of service
THE JOB
- ✓Acquisition of new customers (mid-market and enterprise) for projects around Microsoft 365, Azure, Security & Identity, as well as PKI/CLM
- ✓Expansion and maintenance of existing customer relationships (account development)
- ✓Consulting across the entire sales cycle: needs, solution design, proposal, negotiation, closing
- ✓Capture and analysis of requirements, plus development and presentation of customer-specific solution concepts
- ✓Creation, follow-up, and qualification of proposals and leads (pipeline management)
- ✓Participation in customer events, trade fairs, and specialist formats
Project examples:
- ✓Introduction of Intune/Autopilot as a workplace standard (use-case scope, license/stack mapping, implementation plan).
- ✓Identity & access modernization with Entra ID (MFA/Conditional Access/PIM) as a security baseline package.
- ✓PKI & CLM modernization: AD CS + Keyfactor Command, including a use-case roadmap (NAC/VPN/TLS automation) and operating model.
YOU
- ✓Experience in solution and project sales, ideally in the Microsoft ecosystem
- ✓Experience in account management and new customer acquisition
- ✓Persuasiveness, a reliable professional presence, and enjoyment of consulting
- ✓High self-motivation, a structured way of working, and team spirit
- ✓Customer-oriented mindset and willingness to travel
- ✓Class B driver’s license
- ✓Very good German and English skills, written and spoken
- ✓Desirable: understanding of Microsoft 365, Azure, Security/Identity (e.g., Entra ID), and PKI/CLM
WE
- ✓We work with a bonus system—those who contribute are rewarded with top-level compensation
- ✓Continuous learning is a priority at XELANED—around four weeks per year are planned for each employee as fixed, paid training time (including certification through our XELANED Academy)
- ✓We live flat hierarchies and self-organized work
- ✓We value team building: regular company events and outings help you get to know your colleagues better outside of daily work as well
- ✓We always try to accommodate our employees’ preferences for the ideal place of work: do you want to travel frequently and occasionally go abroad? Or would you rather work close to where you live? At XELANED, both are possible!
- ✓There is no one-size-fits-all workday with us; every customer and every assignment is unique—and because our customers come from many different industries, you get to know them through your work
- ✓Benefits such as a laptop and mobile phone are also part of the XELANED GmbH package—as is a company car after a certain period of service
If the right role for you is not currently listed, we look forward to receiving your speculative application.
Our guiding principle is: “Hire people – not skills”.
Does this sound interesting to you? Then please send us your detailed application documents, including your earliest possible start date and salary expectations, preferably by email to: personal[at]xelaned.de
Alternatively by mail to:
XELANED GmbH
Mr. Dennis Woicke
Munich Airport Business Park
Ludwigstr. 47
85399 Hallbergmoos
We look forward to getting to know you in person!
Our guiding principle is: “Hire people – not skills”.
Does this sound interesting to you? Then please send us your detailed application documents, including your earliest possible start date and salary expectations, preferably by email to: personal[at]xelaned.de
Alternatively by mail to:
XELANED GmbH
Mr. Dennis Woicke
Munich Airport Business Park
Ludwigstr. 47
85399 Hallbergmoos
We look forward to getting to know you in person!