Architect, IAM

Pandora; Warszawa; Hybrid; PLN 190,000 - 280,000; Full time

Benefits offered by this job

Hybrid work model

Discounts on Pandora products

Flexible working hours

Medicover medical care

Generali Life Insurance

Medicover Sport Card

MyBenefit cafeteria program

PPE pension plans

Social fund benefits

Employee Referral Program

Job summary

Pandora seeks an experienced Identity & Access Management Architect to shape and evolve its IAM architecture across cloud, hybrid, and on-prem environments. You will drive governance, standardize processes, and lead integration of core IAM platforms with enterprise applications.

The role requires deep knowledge of identity standards, lifecycle management, and strong collaboration with Engineering, Security, and EA teams. Hybrid work and professional development are offered.

Qualifications

• Proven experience as IAM Architect in enterprise settings.
• Strong knowledge of IAM standards (SAML, OAuth 2.0, OpenID Connect, SCIM).
• Experience with SailPoint, Entra ID and AD integration.
• Retail/manufacturing identity landscapes is a plus.
• Excellent stakeholder management and communication.

Responsibilities

• Own and evolve Pandora’s IAM architecture, governance framework and target-state landscape.
• Lead integration and management of SailPoint, Entra ID and Active Directory.
• Design joiner/mover/leaver automation and provisioning workflows.
• Translate security requirements into scalable architecture and SOPs.

Skills

Identity governance

Identity lifecycle management

RBAC

Access governance

PAM

Authentication

Authorization

Federation

SAML

OAuth 2.0

OpenID Connect

SCIM

Cloud/Hybrid/On-Prem

Tools

SailPoint

Microsoft Entra ID

Active Directory

Integration with cloud/on-prem

Job description

Select how often (in days) to receive an alert:

PANDORA’s Digital & Technology Hub in Warsaw is a key part of the world’s largest jewellery brand, supporting millions of people in expressing their emotions through meaningful jewellery. As one of our fast-growing global locations, the Warsaw Hub plays a vital role in driving digital innovation, delivering scalable technology solutions and supporting our global transformation journey. Our teams work closely with colleagues across the globe, including our headquarters in Copenhagen, to shape the future of digital in retail and e-commerce.

We’re proud of our inclusive, people-first culture, guided by our values: We Care, We Dream, We Dare, We Deliver. If you are an experienced IAM Architect looking for a new professional challenge in a dynamic and inspiring environment where technology meets creativity and where your work truly makes an impact, join our Digital Workplace team, driving the evolution of our global digital workplace.

We are looking for an experienced Identity & Access Management Architect to shape and evolve Pandora's IAM architecture.

In this role, you will translate IAM strategy into scalable architecture, standards, and technical solutions across identity governance, authentication, authorization, privileged access, and identity lifecycle management.Working closely with Engineering, Cyber Security, Enterprise Architecture, and application teams, you will provide technical leadership and help deliver secure, scalable, and pragmatic identity solutions across Pandora's global environment.

Key Responsibilities:

• Own and evolve Pandora’s IAM architecture, standards, governance framework, and target-state identity landscape.
• Act as the technical expert for core IAM platforms, including SailPoint Identity Security Cloud, Microsoft Entra ID, and Active Directory.
• Design and govern identity lifecycle processes, including Joiner-Mover-Leaver (JML) automation, provisioning, access requests, recertifications, roles, and entitlements.
• Define how access is granted, managed, and governed across Pandora, ensuring secure, scalable, and compliant access models.
• Translate IAM strategy and business requirements into scalable technical solutions, architecture patterns, and operating procedures (SOPs).
• Define and maintain integration patterns between IAM platforms and enterprise applications across cloud, SaaS, and on-premises environments.
• Provide architectural guidance and technical leadership to engineering and application teams, supporting solution design and implementation.
• Partner with Security, HR, Infrastructure, and Enterprise Architecture teams to continuously strengthen IAM governance and controls.

We’re the perfect match, if you have:

• Deep understanding of Identity Governance, identity lifecycle management, RBAC, access governance, PAM, authentication, authorisation and federation.
• Strong experience with SailPoint, Microsoft Entra ID and Active Directory and their integration into complex enterprise landscapes.
• Strong knowledge of modern identity standards and protocols including SAML, OAuth 2.0, OpenID Connect and SCIM.
• Experience designing identity solutions across cloud, hybrid and on-premises environments.
• Experience with complex retail and/or manufacturing identity landscapes, including workforce, third-party, privileged and non-human identities.
• Strong understanding of identity integration patterns, APIs, automation, provisioning and application onboarding.
• Ability to translate business and security requirements into clear architecture decisions, standards and technical designs.
• Strong stakeholder management skills and the ability to provide technical direction across engineering, architecture, security, and application teams.
• A pragmatic mindset, balancing security, usability, resilience and architectural simplicity.
• English and Polish – advanced (written and spoken),

Our Offer:

• Stable employment on the basis of an employment contract with a basic salary and a achievable annual bonus.
• Hybrid work model - 2 days per week in the office (our office is located at Domaniewska 28, with free employee parking available upon prior reservation).
• Attractive discounts on Pandora products.
• Flexible working hours (start 7am-10am, finish 3pm-6pm).
• Support for professional competence development (including knowledge sharing, professional training).
• PREMIUM package of MEDICOVER medical care with dental care.
• Generali Life Insurance.
• Medicover Sport Card.
• Benefits available in cafeteria program on the MyBenefit platform.
• Additional days off e.g. for birthdays, health check.
• Subsidy for your home office equipment.
• Employee Pension Plans (PPE).
• Additional benefits under the company's social fund (e.g., holiday or kindergarten subsidies).
• Employee Referral Program.

Pandora’s recruitment procedures are designed to be transparent and clear for all candidates. This helps us ensure that applicants are provided with a fair and equal opportunity to demonstrate their competencies and skills by removing blocking factors, possible biases, and risks of discrimination. We encourage everyone applying to our vacancies to refrain from adding identity-related elements such as a photo, marital status and age.#LI-DNI