01
TRCI-26-05071
Technical Lead – Microsoft Entra Global Secure Access (Entra Private Access)
Hands-on Technical Lead needed to design, implement and operate Microsoft Entra Global Secure Access with an initial focus on Entra Private Access. You will build a secure and resilient ZTNA platform, lead onboarding of internal applications, and drive migration from VPN-based access to identity-based application access. The role spans architecture, platform configuration, production operations, monitoring and advanced troubleshooting across identity, endpoints and networking, coordinating delivery and incident resolution with IAM, Network, Endpoint, Security/SOC, Service Desk, Infrastructure and application teams.
Position summary
- Location
- Sweden
- Workplace
- On-site
- Employment
- Contract
- Experience
- Minimum 5 years and Maximum 10 years
Role overview
Why This Role Matters.
Hands-on Technical Lead needed to design, implement and operate Microsoft Entra Global Secure Access with an initial focus on Entra Private Access. You will build a secure and resilient ZTNA platform, lead onboarding of internal applications, and drive migration from VPN-based access to identity-based application access. The role spans architecture, platform configuration, production operations, monitoring and advanced troubleshooting across identity, endpoints and networking, coordinating delivery and incident resolution with IAM, Network, Endpoint, Security/SOC, Service Desk, Infrastructure and application teams.
Your Impact
Deliver Enterprise Value
Help organisations solve complex business problems through modern technology, consulting expertise and measurable outcomes.
Collaboration
Work Across Teams
Collaborate with consultants, architects, engineers and client stakeholders throughout the project lifecycle.
Growth
Learn Continuously
Gain exposure to enterprise technologies, certifications, mentoring and real-world project experience.
Career Path
Grow With Ubique
Build a long-term consulting career with opportunities to take on greater responsibility and leadership over time.
Responsibilities
What You'll Be Doing.
Every role at Ubique contributes directly to solving meaningful business challenges for our clients.
02
This role combines technical architecture, platform configuration, production operations and advanced troubleshooting. It suits an experienced Entra and infrastructure specialist who understands how identity, endpoints and networking interact—and can take technical ownership across these areas.
03
Working closely with the Product Owner and IAM team, you will
04
Own the technical design, configuration and continued development of the Global Secure Access platform.
05
Design Private Network Connector deployments and connector groups for high availability, failover, capacity and regional resilience.
06
Configure application access using Entra ID, security groups, application assignments, Conditional Access, MFA and device-compliance controls.
07
Lead application discovery, onboarding and migration to Private Access, assessing dependencies such as DNS, ports, routing, authentication and TLS.
08
Establish configuration standards, deployment patterns, validation steps and rollback procedures.
09
Monitor platform health, connectors, traffic flows and policy synchronisation, and lead complex troubleshooting and root-cause analysis.
10
Create runbooks, support procedures and escalation paths to prepare the service for ongoing operations.
11
Coordinate delivery and incident resolution across Network, Endpoint, Security, SOC, Service Desk, Infrastructure and application teams, including Microsoft Support.
12
Support security reviews, controlled releases and knowledge transfer to other engineers.
Technology stack
Tools & Technologies.
The platforms and technologies you'll use to build modern, enterprise-grade solutions.
01
Microsoft Entra
Required
02
Microsoft Entra ID
Required
03
Azure AD
Required
04
Global Secure Access
Required
05
Entra Private Access
Required
06
Entra Internet Access
Required
07
ZTNA
Required
08
Zero Trust
Required
09
Conditional Access
Required
10
MFA
Required
11
Device compliance
Required
12
Private Network Connector
Required
13
Connector groups
Required
14
DNS
Required
15
TCP/IP
Required
16
Routing
Required
17
Firewall
Required
18
Ports
Required
19
TLS
Required
20
HTTP
Required
Requirements
Skills & Experience.
We value curiosity, collaboration and continuous learning. If you don't meet every requirement but believe you can make an impact, we'd still love to hear from you.
Essential
Required Qualifications
Microsoft Entra ID (Azure AD) administration in large enterprise
Microsoft Entra Global Secure Access and/or Entra Private Access (or comparable ZTNA) implementation/operations
Private Network Connectors: deployment, registration, certificates, outbound connectivity
Connector groups design for high availability, failover, capacity and regional resilience
Conditional Access policies
MFA integration
Device identity and device compliance controls (e.g., compliant device requirements)
Identity-based access models: security groups, application assignments, entitlement models
Application onboarding/migration from VPN to ZTNA; dependency assessment (DNS, ports, routing, auth, TLS)
Networking fundamentals and troubleshooting: DNS, TCP/IP, routing, firewalls, ports
TLS and HTTP/HTTPS understanding for application connectivity
Production operations: monitoring/logging, incident management, root-cause analysis
Change/release management, validation/rollback procedures, runbooks and support handover
Advanced troubleshooting across identity policies, endpoints, connectors and network dependencies
Technical leadership: coordinating across teams, making architectural decisions, mentoring
English communication (mandatory)
On-site presence in Södertälje minimum 3 days/week
Preferred
Nice to Have
Microsoft Intune
Microsoft Defender
Entra Internet Access
Privileged Identity Management (PIM), JIT access, access governance
Windows and macOS access scenarios
ServiceNow
Jira
Security/compliance frameworks: ISO 27001, NIST Zero Trust, DORA, GDPR
Structured risk assessments and business-impact analysis
Swedish language
What you'll gain
More Than Just A Job.
We're committed to helping every team member grow professionally, personally and technically while working on meaningful projects.
Global Exposure
Collaborate with international clients and multicultural teams on enterprise programmes.
Continuous Learning
Expand your expertise through mentoring, certifications and hands-on project experience.
Career Growth
Take ownership, develop leadership skills and grow your consulting career over time.
Flexible Working
Hybrid and remote collaboration designed around trust and delivering exceptional outcomes.
People First
Join a supportive culture where collaboration, respect and long-term relationships come first.
Enterprise Projects
Work on meaningful technology initiatives for leading organisations across industries.
Apply
Apply for Technical Lead – Microsoft Entra Global Secure Access (Entra Private Access)
One page, about two minutes. We only ask for what we actually need to have a first conversation.