Lead PAM Engineer

Lead PAM Engineer – OT & Enterprise
 

• Project Name: Development and operations of PAM360

• Job Classification: IT Security Consulting
• Category Name: Technical Security (Senior Level)

Description:

• • Own and contribute to the end-to-end Privileged Access Management (PAM) solution delivery, ensuring secure, compliant, and fit-for-purpose implementation of PAM controls across IT and OT environments, including privileged identity lifecycle, credential vaulting, and access workflows.
  • Lead and support the architecture and rollout of PAM solutions, engaging with business units, global IT, and OT stakeholders to design and implement privileged access for human and non-human identities, addressing regulatory, operational, and safety constraints.
  • Shape and execute the PAM rollout roadmap, onboarding privileged accounts, service accounts, and OT systems into the PAM platform, implementing capabilities such as password rotation, secrets management, just-in-time (JIT) access, and session monitoring/recording, and driving delivery against defined Go-Live milestones.
  • Apply and uphold security best practices, guidelines, blueprints, and design patterns for privileged access, ensuring alignment with enterprise architecture principles, Zero Trust, least privilege, and OT-specific requirements such as availability and safety.
  • Integrate PAM controls into operational and delivery processes, including incident response, break-glass access, and audit logging, ensuring privileged activities are traceable, monitored, and compliant with internal policies and external regulations.
  • Act as a trusted PAM and security advisor, translating privileged access risks and compliance requirements into scalable technical solutions embedded into IAM, endpoint, server, cloud, and OT access patterns.

 
Day-to-day responsibilities: 

• • PAM360 Implementation across OT
  • PAM Maintenance (Upgrade all 8 current PAM instances - periodically)
  • Discussion with stakeholders; AD team, Network team & DB team
  • PAM daily documentation
  • PAM Implementation testing & evidence capturing
  • PAM Implementation Hypercare & Roll-out Support
  • PAM End-user Training & Coordination after Implementation
  • L2/3 Support for PAM

Location: Gentofte, Denmark
 

• The consultant is expected to conduct work from the specified location mentioned in the requisition. They are mandated to support offices for a minimum of two days per week. Fully remote work is not allowed unless prior agreement with hiring manager. These rules could be modified in the future at discretion.

 
Requirements:

• • Strong hands-on experience designing and implementing IAM integrations and processes in large-scale, multi-site enterprise environments; practical exposure to one or more leading Privileged Access Management (PAM) platforms is required. Experience with PAM360 is a strong advantage.
  • PAM engineering & operations (Must-have): Proven experience in PAM implementation, ongoing maintenance, and operational support, including privileged account onboarding, policy configuration, and access workflow management.
  • Automation & scripting (Must-have): Working knowledge of PowerShell for automation, operational efficiency, and support of PAM processes is strongly preferred.
  • Infrastructure foundations (Must-have): Solid understanding of core IT infrastructure components relevant to PAM implementations, including Active Directory, networking concepts, and database dependencies.
  • IAM integration & troubleshooting: Strong capability to design IAM integrations and troubleshoot complex IAM/PAM issues across distributed, multi-site environments, ensuring platform stability and security.
  • Platform & infrastructure exposure (Nice-to-have): Experience with on-prem Active Directory, MSSQL, network components, and OT environments is considered an advantage.
  • Collaboration & delivery: Demonstrated ability to work effectively within a team, contribute to team cohesion, and collaborate with cross-functional stakeholders; strong communication skills and a results-driven mindset are essential.

 

• Option for prolonging the contract: Yes
• Number of months: 6
• Number of extensions: 3
• Should consultant bring their own PC?: No

• Hours Per Week: 37.00

With over 90 years' combined experience, NES Fircroft (NES) is proud to be the world's leading engineering staffing provider spanning the Oil & Gas, Power & Renewables, Chemicals, Construction & Infrastructure, Life Sciences, Mining and Manufacturing sectors worldwide. With more than 80 offices in 45 countries, we are able to provide our clients with the engineering and technical expertise they need, wherever and whenever it is needed. We offer contractors far more than a traditional recruitment service, supporting with everything from securing visas and work permits, to providing market-leading benefits packages and accommodation, ensuring they are safely and compliantly able to support our clients.