01
TRCI-26-04925
Technical Lead — Microsoft Entra Global Secure Access (Entra Private Access)
Hands-on Technical Lead needed to design, implement, and operate Microsoft Entra Global Secure Access with an initial focus on Entra Private Access. You will own the platform design/configuration, build resilient Private Network Connector deployments, onboard and migrate internal applications from VPN to identity-based access, and run production operations including monitoring, incident handling, and deep troubleshooting across identity, endpoints, connectors, and networking dependencies. The role requires strong Entra ID/Conditional Access skills, solid networking fundamentals (DNS/TCP/IP/TLS/routing), and the ability to coordinate across security, network, endpoint, and application teams in a large enterprise environment.
Position summary
- Location
- Sweden
- Workplace
- On-site
- Employment
- Contract
- Experience
- Minimum 5 years and Maximum 10 years
Role overview
Why This Role Matters.
Hands-on Technical Lead needed to design, implement, and operate Microsoft Entra Global Secure Access with an initial focus on Entra Private Access. You will own the platform design/configuration, build resilient Private Network Connector deployments, onboard and migrate internal applications from VPN to identity-based access, and run production operations including monitoring, incident handling, and deep troubleshooting across identity, endpoints, connectors, and networking dependencies. The role requires strong Entra ID/Conditional Access skills, solid networking fundamentals (DNS/TCP/IP/TLS/routing), and the ability to coordinate across security, network, endpoint, and application teams in a large enterprise environment.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
This role combines technical architecture, platform configuration, production operations and advanced troubleshooting. It suits an experienced Entra and infrastructure specialist who understands how identity, endpoints and networking interact—and can take technical ownership across these areas.
03
Working closely with the Product Owner and IAM team, you will
04
Own the technical design, configuration and continued development of the Global Secure Access platform.
05
Design Private Network Connector deployments and connector groups for high availability, failover, capacity and regional resilience.
06
Configure application access using Entra ID, security groups, application assignments, Conditional Access, MFA and device-compliance controls.
07
Lead application discovery, onboarding and migration to Private Access, assessing dependencies such as DNS, ports, routing, authentication and TLS.
08
Establish configuration standards, deployment patterns, validation steps and rollback procedures.
09
Monitor platform health, connectors, traffic flows and policy synchronisation, and lead complex troubleshooting and root-cause analysis.
10
Create runbooks, support procedures and escalation paths to prepare the service for ongoing operations.
11
Coordinate delivery and incident resolution across Network, Endpoint, Security, SOC, Service Desk, Infrastructure and application teams, including Microsoft Support.
12
Support security reviews, controlled releases and knowledge transfer to other engineers.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Microsoft Entra ID
Required
02
Azure AD
Required
03
Microsoft Entra Global Secure Access
Required
04
Global Secure Access
Required
05
Microsoft Entra Private Access
Required
06
Entra Private Access
Required
07
ZTNA
Required
08
Zero Trust Network Access
Required
09
Conditional Access
Required
10
MFA
Required
11
Device compliance
Required
12
Device identity
Required
13
Private Network Connector
Required
14
Connector groups
Required
15
Policy synchronization
Required
16
Traffic forwarding
Required
17
DNS
Required
18
TCP/IP
Required
19
Routing
Required
20
Firewall
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Microsoft Entra ID (Azure AD) administration in large enterprise
Microsoft Entra Global Secure Access (GSA) and/or Entra Private Access (or comparable ZTNA)
Entra Private Access connector model: Private Network Connectors, connector groups, registration, certificates, outbound connectivity
Conditional Access design and troubleshooting
MFA integration and enforcement
Device identity and device compliance controls (incl. endpoint compliance signals)
Application onboarding/migration from VPN to identity-based access (ZTNA)
Networking fundamentals: DNS, TCP/IP, routing, firewalls, ports
TLS/HTTP/HTTPS fundamentals and troubleshooting
Troubleshooting application connectivity and traffic forwarding/policy synchronization issues
High availability/resilience design (failover, capacity, regional resilience) for connectors/platform
Production operations: monitoring/logging, incident management, root-cause analysis
Change/release management, validation/rollback procedures, runbooks/support handover
Technical leadership: coordinating across teams, making architectural decisions, mentoring
English communication (mandatory)
Preferred
Nice to Have
Microsoft Intune
Microsoft Defender
Entra Internet Access
Privileged Identity Management (PIM), JIT access, access governance
Windows and macOS access scenarios
ServiceNow
Jira
Security/compliance frameworks: ISO 27001, NIST Zero Trust, DORA, GDPR
Structured risk assessments and business-impact analysis
Swedish language
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Technical Lead — Microsoft Entra Global Secure Access (Entra Private Access)
One page, about two minutes. We only ask for what we actually need to have a first conversation.