Identity Security (IAM) Engineer

Schibsted; Oslo fylke; Hybrid; NOK 900,000 - 1,200,000; Full time

Job summary

Schibsted in Oslo/Stockholm seeks an Identity Security Engineer to secure access across a large technology organisation. You’ll design, implement and operate IAM solutions, ensuring the right people have the right access while balancing security with journalists' and editors' workflows.

You’ll collaborate with teams across Sweden and Norway, monitor IAM systems, run access reviews, and participate in audits. Experience with LDAP, SAML, OAuth/OpenID Connect and MFA is valued.

Qualifications

• A few years of hands-on IAM experience in enterprise environments.
• Knowledge of IAM technologies and protocols (e.g., LDAP, SAML, OAuth 2.0, OpenID Connect, SCIM, MFA).
• Understanding of identity governance, access and entitlement management, and PAM.

Responsibilities

• Design, implement and manage IAM solutions across systems and apps.
• Develop and maintain IAM policies, procedures and standards.
• Monitor IAM systems and logs, investigate unusual activity and incidents.
• Support access requests and reviews, and advise on governance.
• Engage with auditors/regulators on security assessments.
• Share knowledge to strengthen security culture.

Skills

IAM experience

Access management

Problem solving

Collaboration

Tools

Okta

Entra ID

SailPoint

Ping Identity

Job description

At Schibsted, cybersecurity is about more than protecting systems and applications. It's also about protecting journalism, the people behind it, and the technology that makes independent news accessible to millions of people.

We're looking for Identity Security Engineers to join our cybersecurity team in Stockholm or Oslo. This is an opportunity for someone with hands-on Identity and Access Management (IAM) experience who wants to help shape how we manage identity security across a large technology organisation. We're looking for colleagues at different experience levels, including a senior engineer.

First, a little about us

Schibsted is one of the leading media groups in the Nordics, home to well-known news brands including Aftonbladet, Svenska Dagbladet, VG and Aftenposten. Every day, millions of people turn to our news organisations to stay informed, understand the world around them, and access independent journalism. Behind these brands is a large and diverse technology organisation, building and maintaining the digital products, platforms and infrastructure that make all of this possible.

And with that comes an interesting security challenge

Our news brands are highly visible, and the threats we face go beyond those of a typical corporate environment. From protecting applications and user data to safeguarding journalists and ensuring uninterrupted access to news, cybersecurity plays an important role in keeping our journalism accessible and independent.

That's where you come in.

What you'll be working on

As an Identity Security Engineer, you'll help make sure the right people have access to the right systems and information, while keeping unauthorised access out. You'll be part of a cybersecurity team working across Sweden and Norway, collaborating with colleagues across technology and the wider organisation.

A big part of your job will be designing, implementing and managing IAM solutions. But strong access controls are only part of the picture. You'll also work with the people who rely on those systems, helping teams understand access requirements, resolve issues and put practical processes in place. That means balancing security with the everyday needs of journalists, editors and technology teams.

Since Schibsted is a large organisation with many different brands, products and technologies, no two challenges will necessarily look the same. Depending on your experience, you'll also have the opportunity to guide colleagues and help shape how we approach identity and access management across the organisation.

Some of the things you'll do:

• Implement and manage IAM systems, covering user provisioning, authentication, authorisation and access rights.
• Develop and maintain IAM policies, procedures and standards that support secure access across our infrastructure and applications, in line with regulatory requirements and industry best practices.
• Monitor IAM systems and access logs, investigate unusual activity and respond to unauthorised access attempts and security incidents.
• Support teams with access requests, access reviews and identity governance, helping them understand requirements and find practical solutions.
• Work with external auditors and regulatory bodies on security audits and assessments.
• Share knowledge and contribute to a stronger security culture where managing access responsibly becomes a natural part of how we work.

Who we're looking for

You might have a few years of experience in identity and access management and be ready to take on broader responsibility. Or you might be a more experienced IAM engineer who enjoys shaping solutions, improving processes and sharing knowledge with others. What matters to us is your practical understanding of IAM, your ability to solve problems, and your interest in making secure access work for the people who depend on it.

We'd love to hear from you if you have:

• A few years of experience in IAM, with hands-on experience designing, implementing and managing IAM solutions in enterprise environments.
• A working knowledge of IAM technologies and protocols, for example: LDAP, SAML, OAuth 2.0, OpenID Connect, SCIM and multi-factor authentication (MFA).
• An understanding of identity governance, access and entitlement management, and privileged access management (PAM).
• Hands-on experience with IAM platforms such as Okta, Entra ID, SailPoint, Savyint or Ping Identity
• An analytical approach to troubleshooting and problem-solving, with the ability to prioritise when several tasks need your attention.
• The ability to explain technical concepts clearly and collaborate with both technical and non-technical colleagues.

We're looking for someone who's proactive, collaborative and interested in improving how things work. Someone who doesn't just want to put access controls in place but enjoys working with others to make sure they're effective and practical.

Why join us?

Work that matters. The technology you help protect supports independent journalism and news organisations that play an important role in society.

Interesting security challenges. You'll work across a diverse technology landscape, with different brands, systems and access needs.

An opportunity to grow. You'll develop your IAM expertise through hands-on work across a large technology organisation, collaborating and sharing knowledge with cybersecurity colleagues.

A role that combines technology and people. You'll get to dive into technical identity and access challenges while helping teams find secure ways to do their everyday work.

Room to make an impact. You'll help shape our IAM solutions, processes and ways of working. For more experienced engineers, that also means an opportunity to guide colleagues and contribute to the team's development.

If this sounds like the kind of challenge you'd enjoy, we'd love to hear from you.