IAM Tech Lead

Tdc Net; København; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

TDC NET in Denmark is seeking an experienced IAM Tech Lead to provide technical leadership across the IAM landscape and accelerate automation, standardization and engineering-driven IAM initiatives. You will drive modernization, design complex IAM solutions and guide engineers in integrations, automation and troubleshooting.

The role emphasizes automation, API-driven services, IaC, CI/CD, and resilient IAM platforms (AD, Entra ID, Ping, Delinea PAM, Vault/Boundary).

Qualifications

• 7+ years of IAM experience with senior engineering or leadership responsibilities
• Extensive experience with IAM engineering, solution design and enterprise integrations
• Automation, APIs and scripting using PowerShell, Python or similar
• DevOps practices: Git, CI/CD, Infrastructure as Code, configuration management and automated testing
• Experience designing API-driven integrations, workflow orchestration and automated service fulfilment
• Deep knowledge of enterprise directory and identity technologies (AD, Entra ID, OpenLDAP, Keycloak)
• Experience with IAM capabilities: IGA, SSO/Federation, MFA, PAM, PKI and Secrets Management
• Knowledge of standards: SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP
• Ability to define technical standards, reusable patterns and guardrails
• Ability to lead technical designs, troubleshoot and guide engineers
• Understanding of Zero Trust, least privilege, privileged access and segregation of duties
• Strong communication and collaboration across teams

Responsibilities

• Provide technical direction across the IAM landscape and establish standards with platform owners
• Transform manual IAM processes into API-driven, automated services
• Drive standardized IAM service intake, routing and orchestration across platforms
• Reduce legacy dependencies and support modernization towards scalable identity tech
• Establish reusable patterns for source control, integrations and deployment to ensure reliability

Skills

IAM engineering

Automation

API integrations

DevOps

Security principles

Leadership

Architecture

Tools

PowerShell

Python

Git

Job description

About The Job

We are looking for an experienced IAM Tech Lead to provide technical leadership across our Identity & Access Management landscape and accelerate our journey towards a more automated, standardized and engineering-driven IAM environment.

You will help define the technical direction across Identity Governance & Administration, Directory Services, Authentication & Federation, Privileged Access Management, PKI and IAM Engineering & Automation, working closely with platform and service owners.

A key focus will be to reduce manual IAM operations through automation and standardization, using APIs, scripting, workflow orchestration, Infrastructure as Code and CI/CD.

Drive the technical implementation of the IAM Service Intake and Automation Model, standardizing and automating IAM requests across Jira, ServiceNow, IGA and other IAM platforms.

You will establish reusable engineering patterns for integrations, automation, testing, deployment and monitoring, while improving the resilience and operational readiness of IAM services.

As a hands‑on technical leader, you will lead complex IAM designs and modernization initiatives, guide engineers and contribute directly to integrations, automation and troubleshooting.

Our IAM landscape includes Omada, Microsoft Active Directory and Entra ID, Ping Identity, Delinea PAM, HashiCorp Vault/Boundary and enterprise PKI.

What You Will Help Drive

IAM Technical Leadership

Provide technical direction across the IAM landscape, lead complex solution designs and establish common technical standards in collaboration with IAM platform and service owners.

IAM Engineering & Automation

Transform manual IAM processes into API‑driven and automated services using scripting, workflow automation, Infrastructure as Code, CI/CD and automated testing.

Service Intake & Orchestration

Drive the technical implementation of standardized IAM service intake, routing, orchestration and automated fulfilment across Jira, ServiceNow, IGA and other IAM platforms.

IAM Modernization

Reduce legacy dependencies and technical debt while supporting the transition towards modern, scalable and resilient identity technologies.

Engineering Standards & Reliability

Establish reusable patterns for source control, integrations, configuration management, testing, deployment, monitoring and logging to ensure IAM automation is maintainable and operationally reliable.

"We are looking for someone who can combine deep IAM expertise with an engineering mindset and help us move from manual processes towards standardized and automated identity services. This is an opportunity to help shape how we engineer and modernize IAM across TDC NET," says Abhishek Kumar, Senior Manager, IAM, TDC NET

About You

We are looking for someone who combines engineering and automation mindset and expertise within IAM area.

• 7+ years of professional experience within Identity & Access Management, including significant experience in senior engineering, solution design or technical leadership responsibilities
• Extensive experience with IAM engineering, solution design and enterprise integrations
• Direct experience with automation, APIs and scripting, using PowerShell, Python or similar technologies
• Experience with DevOps engineering practices, including Git, CI/CD, Infrastructure as Code, configuration management and automated testing
• Experience designing API-driven integrations, workflow orchestration and automated service fulfilment
• Deep knowledge of enterprise directory, identity and access technologies, including Active Directory, Entra ID, OpenLDAP, Keycloak or equivalent platforms, with solid understanding of identity lifecycle management, authentication, authorization and federation.
• Experience with key IAM capabilities such as IGA, SSO/Federation, MFA, PAM, PKI and Secrets Management
• Good understanding of standards and protocols such as SAML, OAuth 2.0, OpenID Connect, SCIM and LDAP
• Ability to define technical standards, reusable engineering patterns and implementation guardrails
• Ability to lead technical designs, troubleshoot complex problems and provide technical guidance to engineers
• Extensive understanding of security principles including Zero Trust, least privilege, privileged access and segregation of duties
• Solid communication and collaboration skills across engineering, architecture, security, operations and business teams

You are comfortable moving between architecture, engineering and implementation. You can create technical direction while remaining close enough to the technology to build, challenge and troubleshooting solutions.

You naturally look at repetitive activities and ask how they can be standardized, automated and operated more efficiently.

Security Clearance

As TDC NET is responsible for critical national infrastructure, security is a fundamental part of the role.

Employment is conditional upon the candidate being able to obtain and maintain the security clearance required for the position. The successful candidate must therefore be willing to participate in the applicable security screening and clearance process.

Please note that candidates must already be based in Denmark, as relocation support is not available.

Contact

If you have questions about the position or want to know more about what it means to work at TDC NET, feel free to reach out to Abhishek Kumar, Senior Manager-IAM, on [e-mail].

We look forward to reviewing your application and potentially welcoming you to our team at TDC NET.

Location

Teglholmsgade 1, Copenhagen