Senior Technical Support Specialist

Sapsf; Sweden; On-site; SEK 900,000 - 1,500,000; Full time

Job summary

Sapsf is seeking a Senior Technical Lead for Global Secure Access to design and operate Microsoft Entra-based solutions in a large enterprise environment. You will own platform architecture, drive onboarding of internal apps to Private Access, and collaborate across IAM, Network, Security, and SOC teams.

You will mentor engineers, define standards, and ensure secure, scalable access across the organisation while supporting future Entra-related initiatives.

Qualifications

• Experience with Microsoft Entra ID in large enterprise environments.
• Knowledge of identity-based access control and entitlement models.
• Deep understanding of Conditional Access and risk-based access controls.
• Experience implementing MFA and Zero Trust principles.
• Familiarity with device identity management (Intune/Defender).

Responsibilities

• Own the technical design and ongoing development of the Global Secure Access platform.
• Design scalable Entra Private Access architecture with high availability and resilience.
• Configure access using Entra ID, security groups, and Conditional Access policies.
• Lead onboarding and migration of applications from VPN to Private Access.
• Troubleshoot connectivity, policy sync, and application access issues.
• Produce runbooks, runbooks, and support procedures; manage incidents.
• Coordinate with Microsoft Support and internal teams; mentor engineers.

Skills

Microsoft Entra ID

Identity-based access control

Conditional Access

Multifactor authentication

Zero Trust / NIST style controls

Device identity & compliance

Tools

ServiceNow

Jira

Job description

Career Opportunities: Senior Technical Support Specialist (174781)

Requisition ID174781-Posted10/13/2026

We are looking for an experienced Technical Lead – Microsoft Entra / Global Secure Access to support the design, implementation, operation, and continued development of Microsoft Entra Global Secure Access, with an initial focus on Entra Private Access.

The assignment combines technical leadership, platform engineering, application onboarding, operational responsibility, and complex troubleshooting within a large enterprise environment.

You will take a leading technical role in developing a scalable and resilient Global Secure Access platform while working closely with the Product Owner and wider IAM team, as well as Network, Endpoint/Client, Security, SOC, Service Desk, infrastructure, and application teams.

In addition to Global Secure Access, you will contribute to the maintenance, support, and continued development of other functionality within Microsoft Entra.

Key Responsibilities

Key Responsibilities

• Own the technical design and continued development of the Microsoft Entra Global Secure Access platform.
• Design and maintain scalable Entra Private Access architecture, including Private Network Connectors, connector groups, high availability, failover, capacity planning, application segmentation, and regional/data-centre resilience.
• Configure and govern access to applications using Microsoft Entra ID, security groups and application assignments, Conditional Access, device compliance, multifactor authentication, and Zero Trust principles.
• Lead the onboarding and migration of internal applications from VPN and similar solutions to Private Access.
• Analyse application connectivity requirements, including DNS, TCP/IP, ports, routing, authentication, and TLS.
• Establish technical standards, configuration baselines, deployment patterns, and rollback procedures.
• Monitor platform health, connector availability, capacity, traffic flows, authentication, and policy synchronisation.
• Lead complex incident resolution, root-cause analysis, and problem management.
• Develop and maintain operational documentation, runbooks, troubleshooting guides, and support procedures.
• Support security assessments, risk management, audit activities, and service readiness reviews.
• Coordinate technical activities with Microsoft Support and internal platform teams.
• Contribute to future expansion of the service, including Entra Internet Access where relevant.
• Mentor other engineers and promote knowledge sharing across the organisation.
• Ensure changes are implemented through appropriate change-management and release processes.

Skill Requirements

Must-Have Skills & Experience

• Strong hands-on experience with Microsoft Entra ID in a large enterprise environment.
• Practical experience with identity-based access control, security groups, application assignments, and entitlement models.
• Strong understanding of Conditional Access, including user, device, location, risk, and session-based controls.
• Experience implementing or operating multifactor authentication and Zero Trust access controls.
• Good understanding of device identity and compliance, preferably involving Microsoft Intune and Microsoft Defender.

Global Secure Access & Private Access

• Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access, or a similar Zero Trust Network Access (ZTNA) solution.
• Practical understanding of Private Network Connectors, connector groups, connector registration, certificates, and outbound connectivity.
• Experience designing for high availability, failover, resilience, and capacity management.
• Ability to troubleshoot traffic forwarding, policy synchronisation, and application connectivity issues.

Other Requirements

Networking & Application Connectivity

• Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS, and HTTP/HTTPS.
• Experience troubleshooting connectivity to internal applications, servers, databases, or infrastructure services.
• Understanding of network segmentation and access control for different application and user groups.
• Ability to analyse technical requirements for applications such as file services, RDP, engineering tools, databases, and enterprise platforms.

Operations & Service Management

• Experience operating business-critical services in production.
• Strong skills in monitoring, logging, incident management, and root-cause analysis.
• Experience with change management, release management, technical documentation, and operational handover.
• Ability to define support models, runbooks, escalation paths, and service-management processes.
• Experience working with Security Operations or SOC teams during investigations and incidents.

Technical Leadership & Collaboration

• Demonstrated experience as a Technical Lead, Platform Lead, or Senior Engineer.
• Ability to make sound technical decisions and communicate them clearly to technical and non-technical stakeholders.
• Experience coordinating work across Identity, Network, Endpoint, Security, Infrastructure, and application teams.
• Strong ownership mentality and ability to work independently in a developing product area.
• Ability to mentor engineers and establish consistent technical ways of working.

Meriting Experience

• Experience with privileged access management, PIM, JIT access, and access governance.
• Experience with ServiceNow, Jira, or similar IT service-management and workflow platforms.
• Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR, or similar security and compliance frameworks.
• Experience with risk assessments, BIA, TVA, IRAM, or comparable information-security processes.
• Experience supporting macOS and Windows access scenarios.