Technical Lead – Identity & Secure Access (Microsoft Entra)

Are you the person other engineers come to when a Zero Trust access problem needs solving, not just documenting? We're looking for a Technical Lead to help build out a secure, scalable remote access platform on Microsoft Entra — starting with Entra Private Access — for a large enterprise environment. The role in short You'll take technical ownership of a growing Global Secure Access platform, working closely with a Product Owner and cross-functional teams spanning Identity, Network, Endpoint, Security, SOC, Service Desk, and application teams. This isn't a purely architectural role — you'll be hands-on with configuration, troubleshooting, and platform evolution, while also setting the technical direction others follow. Location: Södertälje, hybrid Applicants must currently reside in Sweden The assignment is projectbased at our client and will continue till 2027-10-08 with possibilities for extension. What you'll be doing Own the technical design and ongoing development of the Microsoft Entra Global Secure Access platform Design and maintain a scalable Entra Private Access setup — connectors, connector groups, high availability, failover, capacity planning, application segmentation, and regional resilience Configure and govern application access through Entra ID, security groups, Conditional Access, device compliance, MFA, and Zero Trust principles Lead the migration of internal applications from VPN-based access to Private Access Analyze application connectivity requirements — DNS, TCP/IP, ports, routing, authentication, TLS Set technical standards, configuration baselines, deployment patterns, and rollback procedures Monitor platform health: connector availability, capacity, traffic flows, authentication, policy sync Lead complex incident resolution and root-cause analysis Maintain operational documentation, runbooks, and troubleshooting guides Support security assessments, risk reviews, and audit activities Coordinate with Microsoft Support and internal platform teams Contribute to future expansion, including Entra Internet Access where relevant Mentor other engineers and help establish consistent technical practices Work within proper change-management and release processes What we're looking for Microsoft Entra & Identity Strong, hands-on Entra ID experience in a large enterprise setting Practical experience with identity-based access control, security groups, application assignments, entitlement models Solid understanding of Conditional Access (user, device, location, risk, session-based controls) Experience implementing or running MFA and Zero Trust access controls Good understanding of device identity/compliance, ideally with Intune and Defender Global Secure Access & Private Access Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access, or a comparable ZTNA solution Practical understanding of Private Network Connectors, connector groups, registration, certificates, outbound connectivity Experience desi…