PAM Engineer

Ørsted; Warszawa; On-site; PLN 17,000 - 26,000; Full time

Benefits offered by this job

Private healthcare

Pension plan

Vacation bonus

Wellbeing programs

Ergonomics support

Team events

Glasses subsidy

Job summary

Ørsted in Poland seeks an Identity and Privileged Access specialist to translate security and regulatory requirements into IAM design and operation. You will help secure critical systems across IT and OT, collaborating with global Digital Technology and OT teams.

The role focuses on PAM tooling, lifecycle management, and ongoing optimisation, with strong emphasis on stakeholder communication, automation with PowerShell, and continual improvement within a multinational, green energy company.

Qualifications

• Strong experience with IAM processes, integration design, and troubleshooting in large-scale environments.
• Solid understanding of identity master data and lifecycle management.
• Knowledge of Active Directory and cloud environments (Azure/AWS).
• Experience with automation, e.g., PowerShell scripting.

Responsibilities

• Identify and map IAM infrastructure, processes, and identity master data dependencies focusing on privileged access.
• Lead integration, design, development, and support of PAM-focused IAM solutions.
• Design, implement, maintain, and optimise IAM toolset for effective integrations.
• Plan onboarding and lifecycle maintenance of applications within IAM tooling.
• Lead IAM discussions in implementations, upgrades, and conversions; recommend security solutions.
• Ensure lifecycle management of IAM tools including patching and monitoring.

Skills

IAM expertise

Integration design

Troubleshooting

PowerShell

Stakeholder communication

Global collaboration

Tools

PAM tools

Job description

Imagine a future where you help protect critical digital and operational systems by shaping secure privileged access in a global green energy company.

Join us in this role where you’ll help the business succeed and stay secure by translating security and regulatory requirements into the design, operation, and continuous improvement of our identity and privileged access management solutions.

Welcome to Cyber Security

You’ll be part of the Identity Security team where, together with your colleagues around the globe, you’ll form part of the Privileged Access team. We are responsible for identity and access management platforms, identity security best practices, and technical solutions across IT and OT. You’ll work closely with business units and our global Digital Technology and OT organisations to address security requirements from regulators, partners, and clients.

As a team, we collaborate across borders, share knowledge openly, and take ownership of building secure, scalable solutions that support Ørsted’s business and sustainability ambitions.

You’ll play an important role in:

• working with the Identity Security product line and business stakeholders to identify and map IAM infrastructure, processes, and identity master data dependencies, with a strong focus on privileged access.
• guiding the integration, design, development, and support of PAM-focused IAM solutions in line with strategic goals and security requirements.
• designing, implementing, maintaining, and continuously optimising the IAM toolset to ensure effective and up-to-date integrations.
• planning and executing onboarding and lifecycle maintenance of applications within the IAM toolset, and providing advisory support to IT and OT teams.
• leading IAM-related discussions in solution implementations, upgrades, enhancements, and conversions, and recommending appropriate security solutions.
• ensuring proper lifecycle management of IAM tools, including patching, monitoring, and operational stability.

To succeed in the role, you:

• have strong experience with IAM processes, integration design, and troubleshooting in large-scale, multi-site environments, preferably involving one or more leading PAM tools.
• bring a solid understanding of identity master data and identity lifecycle management processes.
• have knowledge of Microsoft Active Directory authentication, including Group Policy Objects, and cloud environments such as Azure or AWS.
• are experienced in automation, for example using PowerShell scripting.
• communicate clearly with both technical and non-technical stakeholders, and collaborate effectively in virtual, global teams.
• are driven to achieve results, take ownership, and contribute actively to a culture of continuous improvement.

Shape the future with us

As an applicant or employee, you may request reasonable work and position accommodation or adjustments via [e-mail].

Position salary range: For this position, the expected base pay range is zł17,338.00- zł26,007.00 for the advertised location. The offered base salary will be determined within this range based on relevant skills, experience, and expected role fulfilment within the stated pay range to ensure a fair and competitive offer. Where applicable, you may also be eligible for variable payment and a comprehensive benefits package.

• Our benefits package: For this position, employees who meet eligibility requirements have access to: private healthcare (Medicover and CM Damiana) fully paid by the employer, with optional add-ons (dental care, senior packages, parents/parents-in-law cover); group life insurance, overseas health insurance, and 24/7 accident insurance from day one; access to an employee pension plan (PPE) with a 3.5 % employer contribution after 6 months; a vacation bonus of PLN 1200 once per year; a multimedia package (mobile phone and laptop or tablet); ergonomics support, health apps, and psychological support via Wellbee; a Multisport card and the MyBenefit cafeteria system with a wide range of sports and lifestyle benefits; free fruit and beverages, team events, and company initiatives; glasses subsidy.

Pre-employment background check: This position requires a background check as part of the hiring process and the offer is dependent on the outcome of this check. You will receive more information during the recruitment process. Background checks are conducted by an external provider in accordance with local legal requirements.