{"id":3373660,"url":"https://alion.io/job/pandora-architect-iam","title":"Architect, IAM","company":{"id":1982839,"name":"Pandora","domain":"pandoragroup.com","url":"https://alion.io/company/pandoragroup","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":88,"open_postings":4,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":22,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":50000,"max_usd":85000,"period":"year","method":"role_seniority_country_cell","sample_n":14},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Entra ID","optional":false}],"status":"live","first_seen_at":"2026-10-28T02:01:14Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-31T04:21:54Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"PANDORA’s Digital & Technology Hub in Warsaw is a key part of the world’s largest jewellery brand, supporting millions of people in expressing their emotions through meaningful jewellery. As one of our fast-growing global locations, the Warsaw Hub plays a vital role in driving digital innovation, delivering scalable technology solutions and supporting our global transformation journey. Our teams work closely with colleagues across the globe, including our headquarters in Copenhagen, to shape the future of digital in retail and e-commerce.\nWe’re proud of our inclusive, people-first culture, guided by our values: We Care, We Dream, We Dare, We Deliver. If you are an experienced IAM Architect looking for a new professional challenge in a dynamic and inspiring environment where technology meets creativity and where your work truly makes an impact, join our Digital Workplace team, driving the evolution of our global digital workplace.\nWe are looking for an experienced Identity & Access Management Architect to shape and evolve Pandora's IAM architecture.\nIn this role, you will translate IAM strategy into scalable architecture, standards, and technical solutions across identity governance, authentication, authorization, privileged access, and identity lifecycle management. Working closely with Engineering, Cyber Security, Enterprise Architecture, and application teams, you will provide technical leadership and help deliver secure, scalable, and pragmatic identity solutions across Pandora's global environment.\nKey Responsibilities:\nOwn and evolve Pandora’s IAM architecture, standards, governance framework, and target-state identity landscape.\nAct as the technical expert for core IAM platforms, including SailPoint Identity Security Cloud, Microsoft Entra ID, and Active Directory.\nDesign and govern identity lifecycle processes, including Joiner-Mover-Leaver (JML) automation, provisioning, access requests, recertifications, roles, and entitlements.\nDefine how access is granted, managed, and governed across Pandora, ensuring secure, scalable, and compliant access models.\nTranslate IAM strategy and business requirements into scalable technical solutions, architecture patterns, and operating procedures (SOPs).\nDefine and maintain integration patterns between IAM platforms and enterprise applications across cloud, SaaS, and on-premises environments.\nProvide architectural guidance and technical leadership to engineering and application teams, supporting solution design and implementation.\nPartner with Security, HR, Infrastructure, and Enterprise Architecture teams to continuously strengthen IAM governance and controls.\nWe’re the perfect match, if you have:\nStrong experience designing IAM architectures in large, complex enterprise environments.\nDeep understanding of Identity Governance, identity lifecycle management, RBAC, access governance, PAM, authentication, authorisation and federation.\nStrong experience with SailPoint, Microsoft Entra ID and Active Directory and their integration into complex enterprise landscapes.\nStrong knowledge of modern identity standards and protocols including SAML, OAuth 2.0, OpenID Connect and SCIM.\nExperience designing identity solutions across cloud, hybrid and on-premises environments.\nExperience with complex retail and/or manufacturing identity landscapes, including workforce, third-party, privileged and non-human identities.\nStrong understanding of identity integration patterns, APIs, automation, provisioning and application onboarding.\nAbility to translate business and security requirements into clear architecture decisions, standards and technical designs.\nStrong stakeholder management skills and the ability to provide technical direction across engineering, architecture, security, and application teams.\nA pragmatic mindset, balancing security, usability, resilience and architectural simplicity.\nEnglish and Polish - advanced (written and spoken),\nOur Offer:\nStable employment on the basis of an employment contract with a basic salary and a achievable annual bonus.\nHybrid work model - 2 days per week in the office (our office is located at Domaniewska 28, with free employee parking available upon prior reservation).\nAttractive discounts on Pandora products.\nFlexible working hours (start 7am-10am, finish 3pm-6pm).\nSupport for professional competence development (including knowledge sharing, professional training).\nPREMIUM package of MEDICOVER medical care with dental care.\nGenerali Life Insurance.\nMedicover Sport Card.\nBenefits available in cafeteria program on the MyBenefit platform.\nAdditional days off e.g. for birthdays, health check.\nSubsidy for your home office equipment.\nEmployee Pension Plans (PPE).\nAdditional benefits under the company's social fund (e.g., holiday or kindergarten subsidies).\nEmployee Referral Program.\nPandora’s recruitment procedures are designed to be transparent and clear for all candidates. This helps us ensure that applicants are provided with a fair and equal opportunity to demonstrate their competencies and skills by removing blocking factors, possible biases, and risks of discrimination. We encourage everyone applying to our vacancies to refrain from adding identity-related elements such as a photo, marital status and age.#LI-DNI","description_format":"text","description_chars":5278,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Polish","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":["Cafeteria","Flexible schedule","Home office","Hybrid work","Life insurance"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Jewelry"],"lifecycle":[{"event":"open","at":"2026-10-28T02:01:14Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":22,"reasons":["conf:1","velocity","win:early","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/pandora-architect-iam","json_url":"https://alion.io/job/pandora-architect-iam.json","meta":{"generated_at":"2026-10-31T12:53:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19959,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1982839},"rest":"https://alion.io/mcp/rest/get_company?id=1982839"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpandora-architect-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpandora-architect-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpandora-architect-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pandora-architect-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpandora-architect-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3373660}},{"tool":"search_jobs","arguments":{"company":"pandoragroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3373660},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}