Security Architect, Identity & Access Management (IAM)

3 Sverige; Københavns Kommune; Hybrid; DKK 950,000 - 1,250,000; Full time

Job summary

Tre is strengthening its IAM capabilities to secure identity, authentication, and privileged access across Sweden and Denmark. This senior Security Architect will own the enterprise IAM target architecture, strategic roadmap and reference patterns across the region.

You will work with Cybersecurity, platform and engineering teams to define authentication, authorisation and identity-governance patterns, balancing security with user experience while adhering to Zero Trust and NIS2 requirements.

Qualifications

• Experience in enterprise architecture, security architecture and IAM.
• Strong experience with Microsoft Entra ID, Active Directory and hybrid identity.
• Practical knowledge of OAuth 2.0, OpenID Connect, SAML and SCIM.
• Experience with identity governance, access lifecycle and access reviews.
• Understanding of PAM, PIM and privileged access management.
• Strong stakeholder-management and communication skills in English.

Responsibilities

• Define and evolve the enterprise IAM strategy, target architecture and roadmap.
• Define architecture direction for Microsoft Entra ID, Active Directory and hybrid identity.
• Establish authentication, authorisation and identity-governance patterns.
• Define architecture for privileged access and non-human identities.
• Maintain IAM principles, standards and reference architectures.
• Support strategic transformation initiatives with IAM expertise.
• Work closely with Cybersecurity, platform teams, architects and engineering teams.
• Drive secure-by-design, Zero Trust and NIS2-aligned architecture principles.

Skills

Enterprise architecture

Security architecture

IAM

Stakeholder management

Communication skills

Education

TOGAF or CISSP certification

Tools

Microsoft Entra ID

Active Directory

SAML / OAuth 2.0 / OIDC / SCIM

Job description

Shape the future technology landscape at Tre

Tre is strengthening its architecture function to support major transformation initiatives across Sweden and Denmark.

We are modernising our technology landscape, investing in cloud, AI, digital capabilities and long-term architecture to support future growth.

As part of this journey, we're looking for a Security Architect, Identity & Access Management who wants to help shape the future of one of the Nordic region's leading telecom operators.

Identity & Access Management (IAM) is a foundational capability for customer experiences, employee productivity, APIs, cloud platforms and secure digital transformation.

This is a senior architecture role with enterprise-wide ownership of Tre's long-term IAM direction across Sweden and Denmark.

About our architecture community

At Tre, architecture is evolving into a stronger advisory capability with greater influence across business and technology.

Our architects help create clarity, guide strategic decisions and connect long-term direction with practical execution. You will work alongside Enterprise Architects, Domain Architects, Technology Architects, engineering teams and senior leaders to shape the future technology landscape across Sweden and Denmark.

This is an opportunity to join a growing architecture community with increasing impact on technology strategy, transformation initiatives and business outcomes.

About the role

As our Security Architect, Identity & Access Management, you will own the enterprise IAM target architecture, strategic roadmap and reference patterns across Sweden and Denmark. You will play a key role in strengthening Tre's security architecture by ensuring that identity, authentication, authorisation and privileged access are managed in a secure, scalable and compliant way across the organisation.

You will help define how workforce, customer, partner and machine identities are managed across applications, APIs, platforms and cloud environments.

Working closely with Cybersecurity, platform teams, architects and engineering teams, you will establish a coherent approach to authentication, authorisation, identity-governance and privileged access.

While major transformation programmes will be an important part of your work, your accountability remains enterprise-wide and long-term.

What you'll do

In this role, you will:

• Define and evolve the enterprise IAM strategy, target architecture and roadmap.
• Define architecture direction for Microsoft Entra ID, Active Directory and hybrid identity.
• Establish authentication, authorisation and identity-governance patterns.
• Define architecture for privileged access and non-human identities.
• Maintain IAM principles, standards and reference architectures.
• Support strategic transformation initiatives with IAM expertise.
• Work closely with Cybersecurity, platform teams, architects and engineering teams.
• Drive secure-by-design, Zero Trust and NIS2-aligned architecture principles.

You can look forward to:

• Enduring ownership of a business-critical enterprise capability.
• The opportunity to shape IAM across customer, workforce, partner, API and cloud environments.
• Close collaboration with Cybersecurity, Enterprise Architecture and transformation programmes.
• Complex architecture challenges involving identity governance, privileged access and distributed authorisation.
• The opportunity to establish IAM as a strategic business capability across Tre.
• Significant autonomy and influence within your area of expertise.

Mats describes himself as a leader:

"I believe great architects create clarity rather than complexity. We provide advisory and ‘marriage counseling’ for IT and Business. I value curiosity, accountability and collaboration, and I encourage people to challenge established ways of working when there is a better path forward. My role as a leader is to provide direction, remove obstacles and create an environment where people can have real impact and grow in their area of expertise."\

We believe you have

Must-have:

• Experience in enterprise architecture, security architecture and IAM.
• Strong experience with Microsoft Entra ID, Active Directory and hybrid identity.
• Practical knowledge of OAuth 2.0, OpenID Connect, SAML and SCIM.
• Experience with identity governance, access lifecycle and access reviews.
• Understanding of PAM, PIM and privileged access management.
• Ability to balance strategic architecture with pragmatic delivery.
• Strong stakeholder-management and communication skills in English.

Nice-to-have:

• Experience with customer, B2B or partner identity.
• Experience in telecom or another regulated environment.
• Knowledge of Zero Trust, NIS2 and GDPR.
• Experience with cloud and application security architecture.
• Microsoft, CISSP, SABSA or TOGAF certifications.

Who you are

We're looking for someone who:

• Thinks strategically while remaining pragmatic.
• Creates clarity in complex environments.
• Builds strong relationships across business and technology.
• Balances security, user experience and delivery speed.
• Is comfortable challenging fragmented or overly local solutions.
• Is curious, proactive and driven by continuous improvement.

You communicate in terms of outcomes and trade-offs rather than products and technical controls. You help teams move forward within clear and secure guardrails.

Location

The position can be based in Stockholm, Malmö, Gothenburg/Mölndal or Copenhagen. We welcome applications from candidates based in either Sweden or Denmark.

We use assessments as part of our selection process to support an objective and fair recruitment process. The position may be filled before the application deadline. Background checks are carried out on the final candidate.