Technical Lead – Microsoft Entra / Global Secure

Wequel; Södertälje kommun; Hybrid; SEK 900,000 - 1,200,000; Full time

Job summary

WeQuel is seeking an experienced Technical Lead for Microsoft Entra Global Secure Access in Södertälje, Sweden. You will own the design, implementation and operation of the Global Secure Access platform, initially Entra Private Access, and lead cross-functional efforts across IAM, security, network and infrastructure teams.

The role combines technical leadership, platform engineering and hands-on troubleshooting in a large enterprise setting, with hybrid on-site work and frequent collaboration

Qualifications

• Hands-on experience with Microsoft Entra ID in a large enterprise environment.
• Experience implementing or operating MFA and Zero Trust controls.
• Strong leadership and mentoring abilities for a platform team.
• Excellent communication to technical and non-technical stakeholders.

Responsibilities

• Own the design and development of the Microsoft Entra Global Secure Access platform.
• Design scalable Entra Private Access architecture with high availability and resilience.
• Govern application access through Entra ID, CA, device compliance and MFA.
• Lead onboarding of internal apps from VPN to Private Access.
• Coordinate across IAM, Network, Security and infrastructure teams.
• Develop and maintain runbooks, documentation and operational procedures.

Skills

Microsoft Entra ID

Zero Trust

Platform leadership

Incident management

Stakeholder communication

Network and application connectivity

Tools

Entra Private Access

Entra Global Secure Access

ITSM tools

Job description

We at WeQuel are now looking for an experienced Technical Lead – Microsoft Entra / Global Secure Access in Södertälje, where you will become a key part of the IAM team, with a focus on the design, implementation, operation and continued development of Microsoft Entra Global Secure Access, initially Entra Private Access. The assignment combines technical leadership, platform engineering, application onboarding, operational responsibility and complex troubleshooting within a large enterprise environment. You will take a leading technical role in developing a scalable and resilient Global Secure Access platform, and you will also contribute to the maintenance, support and continued development of other functionality within Microsoft Entra.

As a consultant with us, you will have the opportunity to work with one of our clients, who are leading companies within industry, technology and IT security. You will help strengthen secure access, implement Zero Trust solutions and build resilient, sustainable platforms.

Your responsibilities:

• Ownership of the technical design and continued development of the Microsoft Entra Global Secure Access platform
• Design and maintenance of scalable Entra Private Access architecture, covering Private Network Connectors, connector groups, high availability, failover, capacity planning, application segmentation and regional/data-centre resilience
• Configuration and governance of application access through Microsoft Entra ID, security groups, application assignments, Conditional Access, device compliance, MFA and Zero Trust principles
• Leading the onboarding and migration of internal applications from VPN and similar solutions to Private Access
• Analysis of application connectivity requirements, including DNS, TCP/IP, ports, routing, authentication and TLS
• Establishing technical standards, configuration baselines, deployment patterns and rollback procedures
• Monitoring of platform health, connector availability, capacity, traffic flows, authentication and policy synchronisation
• Leading complex incident resolution, root-cause analysis and problem management
• Developing and maintaining operational documentation, runbooks, troubleshooting guides and support procedures
• Support for security assessments, risk management, audit activities and service readiness reviews
• Coordination of technical activities with Microsoft Support and internal platform teams
• Contribution to future service expansion, including Entra Internet Access where relevant
• Mentoring of other engineers and promoting knowledge sharing across the organisation
• Implementing changes through appropriate change-management and release processes

You will work closely with the Product Owner and the wider IAM team, as well as the Network, Endpoint/Client, Security, SOC, Service Desk, infrastructure and application teams. In this role you drive the technical direction independently while collaborating across many interfaces within the organisation.

Requirements:

Microsoft Entra & Identity

• Strong hands-on experience with Microsoft Entra ID in a large enterprise environment
• Practical experience with identity-based access control, security groups, application assignments and entitlement models
• Strong understanding of Conditional Access, including user, device, location, risk and session-based controls
• Experience implementing or operating MFA and Zero Trust access controls
• Good understanding of device identity and compliance, preferably with Microsoft Intune and Microsoft Defender

Global Secure Access & Private Access

• Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access or a similar ZTNA solution
• Practical understanding of Private Network Connectors, connector groups, connector registration, certificates and outbound connectivity
• Experience designing for high availability, failover, resilience and capacity management
• Troubleshooting of traffic forwarding, policy synchronisation and application connectivity

Networking & Application Connectivity

• Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS and HTTP/HTTPS
• Experience troubleshooting connectivity to internal applications, servers, databases or infrastructure services
• Understanding of network segmentation and access control for different application and user groups
• Analysis of technical requirements for file services, RDP, engineering tools, databases and enterprise platforms

Operations & Service Management

• Experience operating business-critical services in production
• Strong skills in monitoring, logging, incident management and root-cause analysis
• Experience with change management, release management, technical documentation and operational handover
• Ability to define support models, runbooks, escalation paths and service-management processes
• Experience working with Security Operations/SOC teams during investigations and incidents

Technical Leadership & Collaboration

• Proven experience as a Technical Lead, Platform Lead or Senior Engineer
• Sound technical decision-making and clear communication to technical and non-technical stakeholders
• Experience coordinating across Identity, Network, Endpoint, Security, Infrastructure and application teams
• Strong ownership mentality and ability to work independently in a developing product area
• Ability to mentor engineers and establish consistent technical ways of working

Language

• Fluent English required

Meriting

• Privileged access management, PIM, JIT access and access governance
• ServiceNow, Jira or similar ITSM and workflow platforms
• Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR or similar security and compliance frameworks
• Risk assessments, BIA, TVA, IRAM or comparable information‑security processes
• Support of macOS and Windows access scenarios

Personal qualities

• Structured, analytical and pragmatic, comfortable with both strategic architecture and detailed troubleshooting
• Proactive in identifying risks, dependencies and operational weaknesses
• Comfortable taking ownership and making technical decisions in an evolving product and operating model
• Clear and confident communicator with technical and non-technical stakeholders
• Collaborative and service-orientated, comfortable coordinating across multiple teams and technical domains
• Able to balance security, user experience, resilience and delivery speed
• Comfortable mentoring engineers, sharing knowledge and contributing to consistent technical standards

Assignment details

• Start: As soon as possible
• End: Estimated 1-year assignment
• Location: Södertälje, Sweden
• Workload: 100% (full-time)
• Remote: Hybrid, minimum 3 days/week on-site

We offer

At WeQuel, you become part of a consultant team that values people first. We believe success is created through engagement, collaboration and development. We offer a flat organisation with short decision paths, a strong sense of community and the opportunity to shape your own development.