Technical Lead – Identity & Secure Access (Microsoft Entra)

Are you the person other engineers come to when a Zero Trust access problem needs solving, not just documenting? We're looking for a Technical Lead to help build out a secure, scalable remote access platform on Microsoft Entra — starting with Entra Private Access — for a large enterprise environment.

The role in short

You'll take technical ownership of a growing Global Secure Access platform, working closely with a Product Owner and cross-functional teams spanning Identity, Network, Endpoint, Security, SOC, Service Desk, and application teams. This isn't a purely architectural role — you'll be hands-on with configuration, troubleshooting, and platform evolution, while also setting the technical direction others follow.

• Location: Södertälje, hybrid

• Applicants must currently reside in Sweden

The assignment is projectbased at our client and will continue till 2027-10-08 with possibilities for extension.

What you'll be doing

• Own the technical design and ongoing development of the Microsoft Entra Global Secure Access platform

• Design and maintain a scalable Entra Private Access setup — connectors, connector groups, high availability, failover, capacity planning, application segmentation, and regional resilience

• Configure and govern application access through Entra ID, security groups, Conditional Access, device compliance, MFA, and Zero Trust principles

• Lead the migration of internal applications from VPN-based access to Private Access

• Analyze application connectivity requirements — DNS, TCP/IP, ports, routing, authentication, TLS

• Set technical standards, configuration baselines, deployment patterns, and rollback procedures

• Monitor platform health: connector availability, capacity, traffic flows, authentication, policy sync

• Lead complex incident resolution and root-cause analysis

• Maintain operational documentation, runbooks, and troubleshooting guides

• Support security assessments, risk reviews, and audit activities

• Coordinate with Microsoft Support and internal platform teams

• Contribute to future expansion, including Entra Internet Access where relevant

• Mentor other engineers and help establish consistent technical practices

• Work within proper change-management and release processes

What we're looking for

Microsoft Entra & Identity

• Strong, hands-on Entra ID experience in a large enterprise setting

• Practical experience with identity-based access control, security groups, application assignments, entitlement models

• Solid understanding of Conditional Access (user, device, location, risk, session-based controls)

• Experience implementing or running MFA and Zero Trust access controls

• Good understanding of device identity/compliance, ideally with Intune and Defender

Global Secure Access & Private Access

• Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access, or a comparable ZTNA solution

• Practical understanding of Private Network Connectors, connector groups, registration, certificates, outbound connectivity

• Experience designing for high availability, failover, resilience, capacity management

• Ability to troubleshoot traffic forwarding, policy sync, and application connectivity issues

Networking & Application Connectivity

• Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS, HTTP/HTTPS

• Experience troubleshooting connectivity to internal apps, servers, databases, infrastructure services

• Understanding of network segmentation and access control across application/user groups

• Ability to analyze connectivity needs for file services, RDP, engineering tools, databases, enterprise platforms

Operations & Service Management

• Experience running business-critical services in production

• Strong monitoring, logging, incident management, and root-cause analysis skills

• Experience with change/release management, technical documentation, operational handover

• Ability to define support models, runbooks, escalation paths

• Experience working alongside Security Operations/SOC teams during investigations

Technical Leadership & Collaboration

• Track record as a Technical Lead, Platform Lead, or Senior Engineer

• Sound technical decision-making and clear communication to technical and non-technical audiences

• Experience coordinating across Identity, Network, Endpoint, Security, Infrastructure, and application teams

• Strong ownership mentality, comfortable working independently in an evolving product area

• Ability to mentor and set consistent technical standards

Nice to have

• Experience with PAM, PIM, JIT access, and access governance

• Experience with ServiceNow, Jira, or similar ITSM/workflow platforms

• Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR, or similar frameworks

• Experience with risk assessments (BIA, TVA, IRAM, or comparable)

• Experience supporting both macOS and Windows access scenarios

Who you are

Structured, analytical, and pragmatic — equally comfortable in strategic architecture discussions and hands-on troubleshooting. You proactively spot risks and dependencies, take ownership without waiting to be told, and communicate clearly across technical and non-technical stakeholders. You know how to balance security, user experience, resilience, and delivery speed.