Technical Lead - Identity & Secure Access (Microsoft Entra)

Are you the person other engineers come to when a Zero Trust access problem needs solving, not just documenting? We're looking for a Technical Lead to help build out a secure, scalable remote access platform on Microsoft Entra - starting with Entra Private Access - for a large enterprise environment.

The role in short

You'll take technical ownership of a growing Global Secure Access platform, working closely with a Product Owner and cross-functional teams spanning Identity, Network, Endpoint, Security, SOC, Service Desk, and application teams. This isn't a purely architectural role - you'll be hands-on with configuration, troubleshooting, and platform evolution, while also setting the technical direction others follow.

Location: Södertälje, hybrid

Applicants must currently reside in Sweden

The assignment is projectbased at our client and will continue till 2027-10-08 with possibilities for extension.

What you'll be doing

Own the technical design and ongoing development of the Microsoft Entra Global Secure Access platform

Design and maintain a scalable Entra Private Access setup - connectors, connector groups, high availability, failover, capacity planning, application segmentation, and regional resilience

Configure and govern application access through Entra ID, security groups, Conditional Access, device compliance, MFA, and Zero Trust principles

Lead the migration of internal applications from VPN-based access to Private Access

Analyze application connectivity requirements - DNS, TCP/IP, ports, routing, authentication, TLS

Set technical standards, configuration baselines, deployment patterns, and rollback procedures

Monitor platform health: connector availability, capacity, traffic flows, authentication, policy sync

Lead complex incident resolution and root-cause analysis

Maintain operational documentation, runbooks, and troubleshooting guides

Support security assessments, risk reviews, and audit activities

Coordinate with Microsoft Support and internal platform teams

Contribute to future expansion, including Entra Internet Access where relevant

Mentor other engineers and help establish consistent technical practices

Work within proper change-management and release processes

What we're looking for

Microsoft Entra & Identity

Strong, hands-on Entra ID experience in a large enterprise setting

Practical experience with identity-based access control, security groups, application assignments, entitlement models

Solid understanding of Conditional Access (user, device, location, risk, session-based controls)

Experience implementing or running MFA and Zero Trust access controls

Good understanding of device identity/compliance, ideally with Intune and Defender

Global Secure Access & Private Access

Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access, or a comparable ZTNA solution

Practical understanding of Private Network Connectors, connector groups, registration, certificates, outbound connectivity

Experience designing for high availability, failover, resilience, capacity management

Ability to troubleshoot traffic forwarding, policy sync, and application connectivity issues

Networking & Application Connectivity

Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS, HTTP/HTTPS

Experience troubleshooting connectivity to internal apps, servers, databases, infrastructure services

Understanding of network segmentation and access control across application/user groups

Ability to analyze connectivity needs for file services, RDP, engineering tools, databases, enterprise platforms

Operations & Service Management

Experience running business-critical services in production

Strong monitoring, logging, incident management, and root-cause analysis skills

Experience with change/release management, technical documentation, operational handover

Ability to define support models, runbooks, escalation paths

Experience working alongside Security Operations/SOC teams during investigations

Technical Leadership & Collaboration

Track record as a Technical Lead, Platform Lead, or Senior Engineer

Sound technical decision-making and clear communication to technical and non-technical audiences

Experience coordinating across Identity, Network, Endpoint, Security, Infrastructure, and application teams

Strong ownership mentality, comfortable working independently in an evolving product area

Ability to mentor and set consistent technical standards

Nice to have

Experience with PAM, PIM, JIT access, and access governance

Experience with ServiceNow, Jira, or similar ITSM/workflow platforms

Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR, or similar frameworks

Experience with risk assessments (BIA, TVA, IRAM, or comparable)

Experience supporting both macOS and Windows access scenarios

Who you are

Structured, analytical, and pragmatic - equally comfortable in strategic architecture discussions and hands-on troubleshooting. You proactively spot risks and dependencies, take ownership without waiting to be told, and communicate clearly across technical and non-technical stakeholders. You know how to balance security, user experience, resilience, and delivery speed.