Lediga job som Säkerhetsarkitekt

IT-enheten i Karlshamns kommun består av 23 medarbetare som alla arbetar dagligen för att stödja vår organisation på dryga 3200 anställda på olika plan inom IT-miljön. Nu söker vi efter en IT-säkerhetsansvarig som vill vara med i vårt arbete framåt.

Arbetsuppgifter

Som IT-säkerhetsansvarig jobbar du i en övergripande roll genom att systematiskt och metodiskt utveckla och förvalta det kommunens arbete inom IT-och cybersäkerhet.

Du arbetar nära verksamhet, IT-funktion och ledning och ansvarar för att ta fram, förvalta och vidareutveckla kommunens systematiska IT-säkerhetsarbete, riktlinjer och styrdokument. I rollen ingår även att stödja verksamheten i frågor som rör säkerhetskrav, riskhantering och regelefterlevnad. Du bidrar med säkerhetskompetens vid förändringar och utveckling av kommunens IT-miljö, exempelvis vid införande av nya tekniska lösningar, där säkerhetsbedömningar och riskanalyser är en naturlig del av arbetet.

En viktig del i arbetet är att identifiera och följa upp risker. I ditt dagliga arbetar du nära systemförvaltare och systemtekniker samt externa leverantörer och partners.

Krav för tjänsten

För att vara aktuell för tjänsten behöver du….

• Ha en eftergymnasial utbildning inom IT-säkerhet.
• Ha erfarenhet av arbete med IT-infrastruktur, exempelvis nätverk, klienter, servrar och molntjänster.
• Ha god kunskap inom systematiskt IT-säkerhetsarbete, riskhantering och säkerhetskrav.
• Ha goda språkkunskaper i engelska och svenska, i tal och skift.
• Körkort B

Det är meriterande om du utöver detta har…

• En utbildning på högskole/universitetsnivå.
• Erfarenhet av att arbeta systematiskt med IT-säkerhetsfrågor.
• Erfarenhet av arbete med risk-och sårbarhetsanalyser.
• Kunskap om systematiskt arbete med ledningssystem

Egenskaper

Vi söker dig som är analytisk och strukturerad och har lätt för att skapa förtroende i både tekniska och verksamhetsnära sammanhang. Du besitter en god kommunikativ förmåga och känner dig trygg med att utbilda och introducera andra i din expertis.

Rollen kräver att du kan arbeta självständigt, prioritera mellan olika säkerhetsbehov och driva frågor från identifierad risk till genomförd åtgärd.

Om arbetsplatsen

IT-enheten tillhör Kommunstyrelseförvaltningen och består bland annat av roller som systemutvecklare, IT-koordinator, projektledare, systemtekniker, datatekniker, teletekniker, It tekniker, enhetschef och IT-och digitaliseringschef. Enheten sitter centralt samlad men arbetar ut gentemot samtliga förvaltningar utifrån verksamhetens behov.

Just nu har vår enhet stort fokus på att stärka kommunens IT- och informationsarbete och samtidigt bygga upp den förmåga som krävs för fortsatt digitalisering.

Som anställd i Karlshamn kommun får du ta del av flera uppskattade förmåner. Du blir medlem i vår personalklubb som erbjuder bland annat träning och aktiviteter samt rabatter på gym, butiker, resor och konserter. För medarbetare som uppfyller kraven finns dessutom möjlighet att byta ut semesterdagstillägget mot extra semesterdagar. Vill du läsa mer om våra förmåner kan du besöka: https://www.karlshamn.se/jobb-och-foretagande/jobba-hos-oss/kommunen-som-arbetsgivare/

Information om tjänsten

• Tjänsten är en tillsvidareanställning på heltid, med start enligt överenskommelse.
• Individuell lönesättning tillämpas.
• Tjänsten innebär placering i säkerhetsklass vilket innebär att en säkerhetsprövning med registerkontroll kommer göras innan anställning enligt 3 kap. i säkerhetsskyddslagen, samt ställer krav på svenskt medborgarskap.
• Sista ansökningsdag: 4 oktober 2026

För mer information om tjänsten kontakta

• IT- och Digitaliseringschef Martin Blomqvist, 0454-811 22, mailto:martin.blomqvist@karlshamn.se
• Facklig företrädare för Vision, Julia Solokof, 0454-811 02

Besök gärna https://www.karlshamn.se/jobb-och-foretagande/jobba-hos-oss/kommunen-som-arbetsgivare/sa-jobbar-vi-med-rekrytering/ för att få information om ingångslöner och bestämmelser om gällande kollektivavtal samt om vad som gäller dig som har skyddade personuppgifter, hur vi kontrollerar rätten att arbeta i Sverige, när du behöver och hur du beställer ett utdrag ur belastningsregistret.

För att kvalitetssäkra rekryteringsprocessen samt möjliggöra god kommunikation med våra sökande ber vi dig ansöka via knappen i annonsen. En ansökan till Karlshamns kommun är en allmän handling.

IT-enheten i Karlshamns kommun består av 23 medarbetare som alla arbetar dagligen för att stödja vår organisation på dryga 3200 anställda på olika plan inom IT-miljön. Nu söker vi efter en IT-säkerhetsansvarig som vill vara med i vårt arbete framåt.

Arbetsuppgifter

Som IT-säkerhetsansvarig jobbar du i en övergripande roll genom att systematiskt och metodiskt utveckla och förvalta det kommunens arbete inom IT-och cybersäkerhet.

Du arbetar nära verksamhet, IT-funktion och ledning och ansvarar för att ta fram, förvalta och vidareutveckla kommunens systematiska IT-säkerhetsarbete, riktlinjer och styrdokument. I rollen ingår även att stödja verksamheten i frågor som rör säkerhetskrav, riskhantering och regelefterlevnad. Du bidrar med säkerhetskompetens vid förändringar och utveckling av kommunens IT-miljö, exempelvis vid införande av nya tekniska lösningar, där säkerhetsbedömningar och riskanalyser är en naturlig del av arbetet.

En viktig del i arbetet är att identifiera och följa upp risker. I ditt dagliga arbetar du nära systemförvaltare och systemtekniker samt externa leverantörer och partners.

Krav för tjänsten

För att vara aktuell för tjänsten behöver du….

• Ha en eftergymnasial utbildning inom IT-säkerhet.
• Ha erfarenhet av arbete med IT-infrastruktur, exempelvis nätverk, klienter, servrar och molntjänster.
• Ha god kunskap inom systematiskt IT-säkerhetsarbete, riskhantering och säkerhetskrav.
• Ha goda språkkunskaper i engelska och svenska, i tal och skift.
• Körkort B

Det är meriterande om du utöver detta har…

• En utbildning på högskole/universitetsnivå.
• Erfarenhet av att arbeta systematiskt med IT-säkerhetsfrågor.
• Erfarenhet av arbete med risk-och sårbarhetsanalyser.
• Kunskap om systematiskt arbete med ledningssystem

Egenskaper

Vi söker dig som är analytisk och strukturerad och har lätt för att skapa förtroende i både tekniska och verksamhetsnära sammanhang. Du besitter en god kommunikativ förmåga och känner dig trygg med att utbilda och introducera andra i din expertis.

Rollen kräver att du kan arbeta självständigt, prioritera mellan olika säkerhetsbehov och driva frågor från identifierad risk till genomförd åtgärd.

Om arbetsplatsen

IT-enheten tillhör Kommunstyrelseförvaltningen och består bland annat av roller som systemutvecklare, IT-koordinator, projektledare, systemtekniker, datatekniker, teletekniker, It tekniker, enhetschef och IT-och digitaliseringschef. Enheten sitter centralt samlad men arbetar ut gentemot samtliga förvaltningar utifrån verksamhetens behov.

Just nu har vår enhet stort fokus på att stärka kommunens IT- och informationsarbete och samtidigt bygga upp den förmåga som krävs för fortsatt digitalisering.

Som anställd i Karlshamn kommun får du ta del av flera uppskattade förmåner. Du blir medlem i vår personalklubb som erbjuder bland annat träning och aktiviteter samt rabatter på gym, butiker, resor och konserter. För medarbetare som uppfyller kraven finns dessutom möjlighet att byta ut semesterdagstillägget mot extra semesterdagar. Vill du läsa mer om våra förmåner kan du besöka: https://www.karlshamn.se/jobb-och-foretagande/jobba-hos-oss/kommunen-som-arbetsgivare/

Information om tjänsten

• Tjänsten är en tillsvidareanställning på heltid, med start enligt överenskommelse.
• Individuell lönesättning tillämpas.
• Tjänsten innebär placering i säkerhetsklass vilket innebär att en säkerhetsprövning med registerkontroll kommer göras innan anställning enligt 3 kap. i säkerhetsskyddslagen, samt ställer krav på svenskt medborgarskap.
• Sista ansökningsdag: 4 oktober 2026

För mer information om tjänsten kontakta

• IT- och Digitaliseringschef Martin Blomqvist, 0454-811 22, mailto:martin.blomqvist@karlshamn.se
• Facklig företrädare för Vision, Julia Solokof, 0454-811 02

Besök gärna https://www.karlshamn.se/jobb-och-foretagande/jobba-hos-oss/kommunen-som-arbetsgivare/sa-jobbar-vi-med-rekrytering/ för att få information om ingångslöner och bestämmelser om gällande kollektivavtal samt om vad som gäller dig som har skyddade personuppgifter, hur vi kontrollerar rätten att arbeta i Sverige, när du behöver och hur du beställer ett utdrag ur belastningsregistret.

För att kvalitetssäkra rekryteringsprocessen samt möjliggöra god kommunikation med våra sökande ber vi dig ansöka via knappen i annonsen. En ansökan till Karlshamns kommun är en allmän handling.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale

• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)

• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations

• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments

• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures

• Acting as the technical bridge between IT operations, security leadership, and compliance functions

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level

• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)

• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups

• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)

• Comfortable owning incident response coordination involving identity-related compromises

• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent

• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation

• Prior consulting experience across multiple client environments

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.