Technical Lead – Microsoft Entra / Global Secure

Techrytera; Stockholms kommun; On-site; SEK 1,200,000 - 1,700,000; Full time

Job summary

Techrytera AB is seeking an experienced Technical Lead to design, implement, operate and continuously develop Microsoft Entra Global Secure Access, initially focusing on Entra Private Access. The role combines technical leadership, platform engineering, onboarding and operations in a large enterprise environment.

You will lead cross-functional efforts, drive resilience, and ensure secure, scalable access across the organization, including integration with Entra Internet Access where relevant.

Qualifications

• Must-have: hands-on Microsoft Entra ID in large enterprise environments.
• Identity-based access control, security groups, application assignments and entitlement models.
• Strong understanding of Conditional Access, including user, device, location, risk and session-based controls.
• Experience implementing or operating MFA and Zero Trust access controls.
• Good understanding of device identity and compliance, preferably with Microsoft Intune and Microsoft Defender.

Responsibilities

• Contribute to the future development of Global Secure Access, including Entra Internet Access where relevant.
• Establish technical standards, configuration baselines, deployment patterns and rollback procedures.
• Maintain platform monitoring, operational documentation, troubleshooting guides and service-readiness processes.
• Experience collaborating with Security Operations or SOC teams during investigations and incidents.

Skills

Technical leadership

Platform engineering

Identity & access management

Zero Trust

Entra ID

Tools

ServiceNow

Jira

Job description

About us
At Techrytera AB, recruitment starts with you. We are a staffing and recruitment company with deep expertise and a clear focus on IT and Engineering. With our industry knowledge and close dialogue with both candidates and clients, we create precise matches where the right skills meet the right needs.

We believe that a truly great match is not just about a job description – it’s about your experience, your potential, and what you genuinely want to develop in. That’s why we always focus on the individual. By understanding your background, motivations, and ambitions, we can connect you with assignments and roles at our clients where you have the right conditions to grow and make an impact.

Our goal is to build long-term and meaningful collaborations – for both you as a candidate and for our clients.

Job Description
We are looking for an experienced Technical Lead to design, implement, operate and continuously develop Microsoft Entra Global Secure Access, initially focusing on Entra Private Access. The role combines technical leadership, platform engineering, application onboarding, operations and advanced troubleshooting in a large enterprise environment.

Qualifications – Must-Have Requirements

• Strong hands-on experience with Microsoft Entra ID in large enterprise environments.

• Practical experience with identity-based access control, security groups, application assignments and entitlement models.

• Strong understanding of Conditional Access, including user, device, location, risk and session-based controls.

• Experience implementing or operating MFA and Zero Trust access controls.

• Good understanding of device identity and compliance, preferably with Microsoft Intune and Microsoft Defender.

Global Secure Access & Private Access

• Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access or a similar Zero Trust Network Access solution.

• Practical knowledge of Private Network Connectors, connector groups, registration, certificates and outbound connectivity.

• Experience designing high availability, failover, resilience and capacity management.

• Ability to troubleshoot traffic forwarding, policy synchronisation and application connectivity.

Networking & Application Connectivity

• Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS and HTTP/HTTPS.

• Experience troubleshooting connectivity to internal applications, servers, databases and infrastructure services.

• Understanding of network segmentation and access control for different application and user groups.

• Ability to analyse technical requirements for file services, RDP, engineering tools, databases and enterprise platforms.

Operations & Service Management

• Experience operating business-critical production services.

• Strong skills in monitoring, logging, incident management and root‑cause analysis.

• Experience with change and release management, technical documentation and operational handover.

• Ability to define support models, runbooks, escalations paths and service‑management processes.

• Experience collaborating with Security Operations or SOC teams during investigations and incidents.

Technical Leadership & Collaboration

• Experience as a Technical Lead, Platform Lead or Senior Engineer.

• Ability to make sound technical decisions and communicate them clearly to technical and non‑technical stakeholders.

• Experience coordinating Identity, Network, Endpoint, Security, Infrastructure and application teams.

• Strong ownership and ability to work independently in a developing product area.

• Experience mentoring engineers and establishing consistent technical practices.

Meriting Experience

• Privileged Access Management (PAM), Privileged Identity Management (PIM), Just‑in‑Time (JIT) access and access governance.

• ServiceNow, Jira or similar IT service‑management and workflow platforms.

• Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR or similar security and compliance frameworks.

• Experience with risk assessments, BIA, TVA, IRAM or comparable information‑security processes.

• Experience supporting macOS and Windows access scenarios.

Additional Responsibilities

Contribute to the future development of Global Secure Access, including Entra Internet Access where relevant.

Establish technical standards, configuration baselines, deployment patterns and rollback procedures.

Maintain platform monitoring, operational documentation, troubleshooting guides and service‑readiness processes.