Lead PAM Engineer - OT & Enterprise (Senior Level)

Introduction & Summary:

The role of Lead PAM Engineer encompasses the comprehensive delivery of Privileged Access Management (PAM) solutions tailored for both Operational Technology (OT) and IT environments. This position demands strong hands-on experience in designing and implementing IAM processes, and a practical understanding of PAM technologies, particularly PAM360. Ideal candidates will possess expertise in secure implementation and ongoing maintenance of PAM controls, and will actively support infrastructure and regulatory compliance initiatives.

Main Responsibilities:

• Manage PAM360 implementation across OT.
• Perform ongoing maintenance and upgrades of existing PAM instances.
• Facilitate discussions among various stakeholders, including AD, network, and DB teams.
• Document daily PAM activities comprehensively.
• Conduct PAM implementation testing and capture relevant evidence.
• Provide hypercare and support during rollout phases.
• Coordinate PAM training for end-users post-implementation.
• Deliver L2/3 support for PAM operations.

Key Requirements:

• Proven experience in PAM implementation and operational support.
• Strong hands-on experience in designing and implementing IAM integrations in large, multi-site environments.
• Practical knowledge of one or more leading PAM platforms; familiarity with PAM360 is advantageous.
• Working knowledge of PowerShell for process automation.
• Solid understanding of relevant IT infrastructure components, such as Active Directory and networking.
• Ability to design IAM integrations and troubleshoot complex IAM/PAM issues.
• Strong collaboration skills with effective communication and outcomes-oriented mindset.

Nice to Have:

• Familiarity with on-prem Active Directory, MSSQL, and network components.
• Experience working within OT environments.

Other Details:

The position is based in Gentofte, Denmark, with a requirement for in-office presence at least two days per week. Remote work from another country is not permitted unless formally agreed upon. A background verification is necessary prior to onboarding.