Engineer, IAM
PANDORA’s Digital & Technology Hub in Warsaw is a key part of the world’s largest jewellery brand, supporting millions of people in expressing their emotions through meaningful jewellery. As one of our fast-growing global locations, the Warsaw Hub plays a vital role in driving digital innovation, delivering scalable technology solutions and supporting our global transformation journey. Our teams work closely with colleagues across the globe including our headquarters in Copenhagen, to shape the future of digital in retail and e-commerce.
We’re proud of our inclusive, people-first culture, guided by our values: We Care, We Dream, We Dare, We Deliver. If you are an experienced and hands-on IAM Engineer looking for a new professional challenge in a dynamic and inspiring environment where technology meets creativity and where your work truly makes an impact, join our Digital Workplace team, driving the evolution of our global digital workplace. This role offers you the opportunity to shape the future of identity and access management at Pandora, ensuring secure and seamless access for thousands of colleagues worldwide.
Role Summary
We are seeking a skilled and proactive IAM Engineer to join our Digital Workplace team. This role will focus on the design, implementation, and operational support of identity and access management solutions, with a strong emphasis on SailPoint IdentityNow and Microsoft Entra ID. You will play a key role in developing new enhancements to SailPoint ISC, improving current LCS processes, finding gaps in existing processes and new applications onboardings & integrations.
Key Responsibilities
• Implement, and maintain IAM solutions using SailPoint ISC and Microsoft Entra ID.
• Implement (develop) and manage Joiner-Mover-Leaver processes integrated with third party on-prem and cloud applications i.e. ServiceNow, HR SuccessFactors, and Active Directory
• Configure and maintain identity lifecycle workflows, access requests, birthright roles, and recertification campaigns
• Developing scripts Java BeanShell, PowerShell. Writing queries (platform based, database)
• Integrate IAM with internal systems and external applications using REST APIs, LDAP, SAML, and OAuth
• Collaborate with HR, IT Security, and Infrastructure teams to align IAM capabilities with business needs.
• Monitor and troubleshoot IAM services, ensuring high availability and performance.
• Support audits and compliance reporting by maintaining accurate identity records and access logs.
• Contribute to the continuous improvement of IAM governance, policies, and documentation.
Qualifications
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in IAM engineering, with hands-on expertise in SailPoint ISC and Microsoft Entra ID.
• Strong understanding and awareness of identity governance, access control, and Zero Trust principles.
• Experience with ServiceNow, Active Directory, and HR systems like SuccessFactors is a plus.
• Competent in scripting languages (e.g., PowerShell, Java, XML, Python) and querying for automation and integration tasks.
• Excellent problem-solving skills and the ability to work independently in a fast-paced environment.
Preferred Certifications
• SailPoint Certified IdentityNow Professional / SailPoint Certified Identity Security Engineer
• Microsoft Certified: Identity and Access Administrator Associate
• ITIL Foundation or equivalent
• JIRA ITSM
Our Offer
- Stable employment on the basis of an employment contract with a basic salary and a achievable annual bonus
- Hybrid work model (our office is located at Domaniewska 28, with free employee parking available upon prior reservation)
- Attractive discounts on Pandora products
- Flexible working hours (start 7am-10am, finish 3pm-6pm)
- Support for professional competence development (including knowledge sharing, professional training)
- PREMIUM package of MEDICOVER medical care with dental care
- Generali Life Insurance
- Sports membership card
- Benefits available in cafeteria program on the MyBenefit platform
- Additional days off e.g. for birthdays, health check
- Subsidy for your home office equipment
- Employee Pension Plans (PPE)
- Additional benefits under the company's social fund (e.g., holiday or kindergarten subsidies)
- Employee Referral Program