Senior IAM & Identity Governance Specialist

Cyber Instincts AB; Göteborgs kommun; On-site; SEK 900,000 - 1,300,000; Full time

Job summary

Cyber Instincts AB, a Gothenburg-based cybersecurity consultancy, seeks a senior IAM lead to drive large-scale identity governance and Zero Trust initiatives across hybrid IT/OT environments.

You will design and implement Conditional Access, PAM/JIT, and governance processes, coordinate incident response, and mentor teams while communicating risk to engineers and executives. 7+ years of IAM leadership and residence in Sweden are required.

Qualifications

• 7+ years of hands-on identity and access management experience, with a senior/lead level
• Deep, demonstrable experience with enterprise identity platforms (Entra ID / Azure AD, AD, Okta, Ping Identity, SailPoint)
• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication
• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)
• Comfortable owning incident response coordination involving identity-related compromises
• Strong communication skills translating identity risk for engineers and executives

Responsibilities

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale
• Leading PAM and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)
• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and RBAC across large user populations
• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments
• Working with Defender XDR / Defender for Endpoint to align identity and endpoint security postures
• Acting as the technical bridge between IT operations, security leadership, and compliance functions

Skills

IAM expertise

Entra ID/Azure AD

PIM/JIT Access

Conditional Access

SSO/FIDO2

Zero Trust

Governance: NIS2/DORA

Incident response

Communication

Tools

Azure Arc

Intune/MDM

PowerShell/Graph API

Job description

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.

What the work looks like:

• Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale
• Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)
• Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations
• Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments
• Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures
• Acting as the technical bridge between IT operations, security leadership, and compliance functions
  
  

What you'll bring:

• 7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level
• Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)
• Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups
• Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)
• Comfortable owning incident response coordination involving identity-related compromises
• Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on
  
  

A plus, not a requirement:

• Microsoft certifications (SC-300, AZ-500) or equivalent
• Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation
• Prior consulting experience across multiple client environments
  
  

This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.