IAM Tech Lead

Csod; København; On-site; DKK 900,000 - 1,300,000; Full time

Job summary

TDC NET is seeking an experienced IAM Tech Lead to guide our Identity & Access Management program. You will drive automation, API-driven services and engineering-led modernization across AD, Entra ID, OpenLDAP and PKI.

You will mentor engineers, set technical standards and lead complex integrations. Based in Copenhagen, you will collaborate with platform owners and business teams to standardize IAM requests, reduce manual toil, and deliver secure, scalable identity services in a fast-paced,

Qualifications

• 7+ years in Identity & Access Management with senior engineering or leadership experience.
• Extensive IAM engineering, solution design and enterprise integrations.
• Automation, APIs and scripting experience (PowerShell, Python or similar).
• DevOps practices including Git, CI/CD, Infrastructure as Code and automated testing.
• Designing API-driven integrations, workflow orchestration and automated service fulfilment.
• Deep knowledge of AD, Entra ID, OpenLDAP, Keycloak or similar platforms.

Responsibilities

• Provide technical direction across the IAM landscape and establish common standards with platform owners.
• Transform manual IAM processes into API-driven and automated services.
• Drive the technical implementation of standardized IAM service intake, routing and orchestration across Jira, ServiceNow and IGA platforms.
• Lead IAM modernization to reduce legacy dependencies and support scalable, resilient identity technologies.
• Establish reusable patterns for source control, integrations, configuration management, testing and monitoring.

Skills

IAM engineering

Automation

APIs

DevOps practices

Scripting

Tools

PowerShell

Python

Git

CI/CD

Infrastructure as Code

Job description

Help build the technical future of IAM and drive the shift towards automated, API-driven and engineering-led identity services at TDC NET.

TDC NET plays a leading role in Denmark’s digital infrastructure, committed to delivering reliable and secure network solutions. Identity & Access Management plays a critical role in protecting our infrastructure by ensuring that the right identities have the right access, at the right time.

About the job

We are looking for an experienced IAM Tech Lead to provide technical leadership across our Identity & Access Management landscape and accelerate our journey towards a more automated, standardized and engineering-driven IAM environment.

You will help define the technical direction across Identity Governance & Administration, Directory Services, Authentication & Federation, Privileged Access Management, PKI and IAM Engineering & Automation, working closely with platform and service owners.

A key focus will be to reduce manual IAM operations through automation and standardization, using APIs, scripting, workflow orchestration, Infrastructure as Code and CI/CD.

Drive the technical implementation of the IAM Service Intake and Automation Model, standardizing and automating IAM requests across Jira, ServiceNow, IGA and other IAM platforms.

You will establish reusable engineering patterns for integrations, automation, testing, deployment and monitoring, while improving the resilience and operational readiness of IAM services.

As a hands‑on technical leader, you will lead complex IAM designs and modernization initiatives, guide engineers and contribute directly to integrations, automation and troubleshooting.

Our IAM landscape includes Omada, Microsoft Active Directory and Entra ID, Ping Identity, Delinea PAM, HashiCorp Vault/Boundary and enterprise PKI.

What you will help drive:

IAM Technical Leadership

Provide technical direction across the IAM landscape, lead complex solution designs and establish common technical standards in collaboration with IAM platform and service owners.

IAM Engineering & Automation

Transform manual IAM processes into API-driven and automated services using scripting, workflow automation, Infrastructure as Code, CI/CD and automated testing.

Service Intake & Orchestration

Drive the technical implementation of standardized IAM service intake, routing, orchestration and automated fulfilment across Jira, ServiceNow, IGA and other IAM platforms.

IAM Modernization

Reduce legacy dependencies and technical debt while supporting the transition towards modern, scalable and resilient identity technologies.

Engineering Standards & Reliability

Establish reusable patterns for source control, integrations, configuration management, testing, deployment, monitoring and logging to ensure IAM automation is maintainable and operationally reliable.

About you

We are looking for someone who combines engineering and automation mindset and expertise within IAM area.

• 7+ years of professional experience within Identity & Access Management, including significant experience in senior engineering, solution design or technical leadership responsibilities
• Extensive experience with IAM engineering, solution design and enterprise integrations
• Direct experience with automation, APIs and scripting, using PowerShell, Python or similar technologies
• Experience with DevOps engineering practices, including Git, CI/CD, Infrastructure as Code, configuration management and automated testing
• Experience designing API-driven integrations, workflow orchestration and automated service fulfilment
• Deep knowledge of enterprise directory, identity and access technologies, including Active Directory, Entra ID, OpenLDAP, Keycloak or equivalent platforms, with solid understanding of identity lifecycle management, authentication, authorization and federation.
• Experience with key IAM capabilities such as IGA, SSO/Federation, MFA, PAM, PKI and Secrets Management
• Good understanding of standards and protocols such as SAML, OAuth 2.0, OpenID Connect, SCIM and LDAP
• Ability to define technical standards, reusable engineering patterns and implementation guardrails
• Ability to lead technical designs, troubleshoot complex problems and provide technical guidance to engineers
• Extensive understanding of security principles including Zero Trust, least privilege, privileged access and segregation of duties
• Solid communication and collaboration skills across engineering, architecture, security, operations and business teams

You are comfortable moving between architecture, engineering and implementation. You can create technical direction while remaining close enough to the technology to build, challenge and troubleshooting solutions.

You naturally look at repetitive activities and ask how they can be standardized, automated and operated more efficiently.

Security clearance:

As TDC NET is responsible for critical national infrastructure, security is a fundamental part of the role.

Employment is conditional upon the candidate being able to obtain and maintain the security clearance required for the position. The successful candidate must therefore be willing to participate in the applicable security screening and clearance process.

Please note that candidates must already be based in Denmark, as relocation support is not available.

We look forward to reviewing your application and potentially welcoming you to our team at TDC NET.

You can expect to hear from us within 3 weeks from the application date; however, due to the holiday period, longer response times may occur.

We encourage you not to include a photo in your resume or motivational letter. In TDC NET we are dedicated to fostering an inclusive culture that values diversity, and we pride ourselves on providing equal opportunities for everyone. All qualified candidates will be assessed regardless of ethnicity, religion, gender, gender identity, sexual orientation, disability and all the other characteristics that make us different.

We are looking forward hearing from you!

Location:

Teglholmsgade 1, Copenhagen