Technical Lead – Microsoft Entra / Global Secure Access

emagine; Stockholms kommun; Hybrid; SEK 900,000 - 1,300,000; Part time

Job summary

emagine is seeking a Technical Lead – Microsoft Entra / Global Secure Access for a manufacturing client. Location: Södertälje, hybrid – minimum 3 days on-site. Start ASAP, contract duration: 1 year.

The role focuses on designing, implementing, and operating Microsoft Entra Global Secure Access with emphasis on Entra Private Access. You will lead platform engineering, onboarding, and cross‑team coordination with IAM, Networking, Security, and application teams.

Qualifications

• Experience with enterprise IAM and Microsoft Entra implementations.
• Ability to lead platform engineering and complex onboarding projects.
• Strong collaboration with IAM, Networking, Endpoint, Security, SOC, and application teams.

Responsibilities

• Own technical design and development of Microsoft Entra Global Secure Access platform.
• Lead onboarding and migration of applications to Private Access.
• Configure access controls using Entra ID, Conditional Access, MFA, and Zero Trust.
• Monitor platform health and drive incident resolution and problem management.
• Develop runbooks and support procedures; coordinate with MS Support.

Skills

Microsoft Entra ID

Entra Global Secure Access

Conditional Access

Zero Trust

Private Network Connectors

DNS/TCP-IP/Firewalls

Incident management

Platform leadership

English fluency

Tools

ServiceNow

Jira

Job description

We are looking for a Technical Lead – Microsoft Entra / Global Secure Access to one of our clients within Manufacturing.

Start date: ASAP

End date: 1 year assignment

Location: Södertälje (Hybrid – minimum 3 days/week on-site)

About the assignment:

This is a technical leadership role focused on designing, implementing, and operating Microsoft Entra Global Secure Access with emphasis on Entra Private Access. The consultant will take ownership of platform engineering, application onboarding, and operational responsibility within a large enterprise environment. The role requires close collaboration with Product Owner, IAM, Network, Endpoint, Security, SOC, and application teams.

Core Responsibilities:

• Own technical design and development of Microsoft Entra Global Secure Access platform, including Private Network Connectors, high availability, failover, and capacity planning
• Lead onboarding and migration of internal applications from VPN to Private Access, analyzing connectivity requirements and establishing technical standards
• Configure and govern application access using Entra ID, Conditional Access, device compliance, MFA, and Zero Trust principles
• Monitor platform health, lead complex incident resolution, root-cause analysis, and problem management
• Develop operational documentation, runbooks, troubleshooting guides, and support procedures
• Coordinate technical activities across teams and with Microsoft Support, mentor engineers, and ensure proper change management

Profile & Qualifications:

• Technical Lead, Platform Lead, or Senior Engineer with proven experience in enterprise environments
• Strong ownership mentality with ability to work independently and make sound technical decisions
• Structured, analytical, and pragmatic professional comfortable with both strategic architecture and detailed troubleshooting
• Clear communicator able to work effectively with technical and non-technical stakeholders across multiple teams
• Able to balance security, user experience, resilience, and delivery speed while maintaining structured approach
• Fluent in English

Required Skills:

• Microsoft Entra ID (strong hands-on experience in large enterprise)
• Microsoft Entra Global Secure Access / Entra Private Access or similar ZTNA solution
• Conditional Access, MFA, and Zero Trust access controls
• Private Network Connectors, connector groups, high availability design
• DNS, TCP/IP, routing, firewalls, ports, TLS, HTTP/HTTPS
• Microsoft Intune and Microsoft Defender (device identity and compliance)
• Monitoring, logging, incident management, change management
• Production operations of business-critical services

Good to have:

• ServiceNow or Jira
• Privileged access management, PIM, JIT access
• ISO 27001, NIST Zero Trust, DORA, GDPR
• Risk assessments, BIA, TVA, IRAM
• macOS and Windows access scenarios