Our game-changers around the world have devoted their careers to ensuring every relationship is exceptional. And we’re proud to be recognized with awards such as "World's Best Workplaces," “Best Companies for Career Growth,” and “Best Company Culture,” year after year.
Join us and be part of this journey towards greater opportunities and brighter futures. We are looking for a Cloud Solution Architect supporting enterprise and highly regulated customers across Sweden and the Nordic region. This customer-facing role requires deep expertise in Microsoft Entra ID, Active Directory, and Identity Management, including Microsoft Identity Manager (MIM), with a strong focus on designing, implementing, and troubleshooting secure identity solutions across on-premises, cloud, and hybrid environments.
As a trusted technical advisor, you will be responsible for architecting and delivering modern identity and access management solutions, leading repeatable Microsoft Entra ID and Active Directory engagements, and providing expert guidance to customers throughout the design, planning, deployment, and optimization lifecycle. Key areas of expertise include Microsoft Entra ID (Conditional Access, Identity Protection, Identity Governance, and Hybrid Identity), Active Directory infrastructure, and complex identity integrations in enterprise environments.
The ideal candidate is an experienced Active Directory and Cloud Engineer with a passion for infrastructure technologies and a proven track record in Active Directory and Microsoft Entra ID architecture, infrastructure design, planning, implementation, migration, and advanced technical troubleshooting. Strong knowledge of Microsoft Identity Manager (MIM) and the Windows Server platform is essential to complement the core identity skill set.
Key Responsibilities
1. Identity Architecture & Modernization
Design and implement Microsoft Entra ID and hybrid identity architectures (users, groups, synchronization, authentication methods).
Design Conditional Access, Identity Protection and Zero Trust identity policies aligned to customer risk and compliance requirements.
Lead identity modernization from on-premises Active Directory, ADFS and MIM toward Microsoft Entra, including Entra ID Governance and Verified ID.
2. Customer Delivery & Execution
Lead end-to-end delivery of Unified/EDE engagements, including Onboarding Accelerator – Entra Identity Protection and Advanced Conditional Access Policies, Onboarding Accelerator – Entra Identity Governance, On-Demand Assessment / RAP as a Service for Microsoft Entra ID, On-Demand Assessment / Offline Assessment / RAP as a Service for Active Directory and Active Directory Security, Active Directory Recovery Execution Service, Enterprise Security Assessment and WorkshopPLUS – Microsoft Entra: Hybrid Identity.
Troubleshoot complex authentication, synchronization, Conditional Access, Active Directory replication, name resolution and Group Policy issues.
Deliver high-quality, repeatable engagements with clear findings, remediation plans and reports.
3. Active Directory Security & Recovery
Assess and harden Active Directory security (tiering, privileged access, attack-path reduction).
Plan and execute Active Directory forest recovery and business continuity for identity services.
4. Identity Governance & Lifecycle
Design joiner/mover/leaver processes, access reviews, entitlement management and privileged identity management with Entra ID Governance.
Support Microsoft Identity Manager (MIM) operations, troubleshooting and migration to Entra ID Governance.
Advise on B2B collaboration with Microsoft Entra External ID.
5. Trusted Advisor & Stakeholder Management
Act as a trusted technical advisor for customers, CSAMs, SDMs and internal stakeholders.
Translate business, compliance and security requirements into practical identity architecture.
Communicate clearly with technical teams and customer decision makers, in English and Swedish.
6. Collaboration & Knowledge Sharing
Collaborate with CSAMs, partners, engineering teams and CSA communities to deliver customer outcomes.
Contribute to reusable assets, delivery IP and best practices for Entra, Active Directory and identity governance.
Share knowledge within the Nordic pod to keep identity depth in the team after transition.
Required Technical Skills
Target Skill Set (required)
The candidate must bring hands-on, customer-delivery-level experience in all of the following skills (CSA GD skill taxonomy names):
Active Directory – AD DS design, operations, security assessment, troubleshooting and forest recovery.
M365 Identity – identity foundations for Microsoft 365 workloads, licensing-aware identity design and tenant hygiene.
Microsoft Entra Conditional Access – policy design, authentication strengths, session controls and Zero Trust rollout.
Microsoft Entra Identity Management (Users/Groups/Hybrid) – users, groups, Entra Connect / Cloud Sync and hybrid identity.
Microsoft Entra Suite - ID Protection, ID Governance, Verified ID – risk-based policies, access reviews, entitlement management, PIM and Verified ID.
Microsoft Identity Manager (MIM) – MIM synchronization and provisioning, operations, troubleshooting and migration to Entra ID Governance.
Name Resolution – DNS design, AD-integrated DNS, name resolution for hybrid identity and troubleshooting.
Windows 11 – Windows 11 identity integration (Entra join / hybrid join, Windows Hello for Business) and security configuration.
Windows Client (Pre-Windows 11) – Windows 10 and earlier client domain integration, Group Policy and authentication troubleshooting.
Windows Server – Windows Server platform for domain controllers and identity services: installation, operations, upgrade and troubleshooting.
Windows Server File Services – file server, DFS and permissions/ACL design and troubleshooting tied to AD groups.
Core Must-have Skills: strong hybrid identity experience is a must
Within the target skill set, expert-level depth is required in at least 2 of the following 3:
Expert-level Microsoft Entra ID security – Conditional Access, ID Protection and ID Governance design and delivery.
Expert-level Active Directory – architecture, security assessment, troubleshooting and recovery.
Strong Microsoft Identity Manager (MIM) and hybrid identity synchronization experience.
And
Architecture design capability: able to own end-to-end identity architecture and present it to customer decision makers.
Ability to operate confidently across cloud, hybrid and on-premises identity environments.
Additional Skills – Strongly Preferred
Active Directory Federation Services (ADFS) – recommended; federation design, troubleshooting and migration to Microsoft Entra ID.
AD CS / Public Key Infrastructure (PKI) – certificate services design and troubleshooting (MIM and/or AD CS/PKI experience expected).
Microsoft Entra External Identity for B2B.
PowerShell / Microsoft Graph scripting and automation for identity operations and reporting.
Better to Have
Microsoft Entra Enterprise Apps & SSO (application migration from ADFS to Entra ID).
Microsoft Entra ID – Security Copilot, Microsoft Defender for Identity and Microsoft Sentinel.
Networking and Hyper-V fundamentals; Microsoft Entra External Identity for CIAM (B2C).
Delivery Accreditations
Technical certification in Active Directory, cloud and Microsoft security technologies (e.g. Microsoft Certified: Identity and Access Administrator Associate (SC-300), Security Operations / Cybersecurity Architect certifications).
Active accreditation (or readiness to accredit within the first [XXX] months) in: Onboarding Accelerator – Entra Identity Protection and Advanced Conditional Access Policies; Onboarding Accelerator – Entra Identity Governance; On-Demand Assessment and RAP as a Service for Microsoft Entra ID; On-Demand Assessment, Offline Assessment and RAP as a Service for Active Directory and Active Directory Security; Active Directory Recovery Execution Service.
Enterprise Security Assessment, WorkshopPLUS – Microsoft Entra: Hybrid Identity, Workshop – Identity Modernization with Entra and Workshop – Microsoft Security Copilot are a plus.
Security & High-Security Environment Requirements
Proven experience in environments with high security, compliance, confidentiality or regulated customer requirements (public sector, critical infrastructure, defense, financial services).
Ability to follow strict confidentiality expectations and demonstrate professionalism, integrity, reliability and accountability.
Where customer engagements require it, the candidate must be able to meet applicable security screening, background check or clearance requirements.
Swedish citizenship is required, as some deliveries require Swedish security clearance (säkerhetsprövning).
Language & Location Requirements
Fluent English, spoken and written, is mandatory.
Fluent Swedish is required; additional Nordic languages are a plus.
Based in Sweden, ideally in or near Stockholm, Göteborg or Malmö (flexible); ability to work onsite as required for customer delivery, workshops or high-security engagements.
Flexibility to travel within the Nordics as needed.
Core Qualifications & Capabilities
5+ years of experience in Active Directory, cloud and infrastructure technologies, IT consulting/support, systems administration, network operations, software support, technology solutions, practice development, architecture and/or consulting, or equivalent experience.
Experience working in a customer-facing role (internal and/or external).
Strong troubleshooting and problem-solving skills in critical identity, authentication and synchronization situations.
Excellent communication, presentation and workshop-facilitation skills.
Strong balance between deep technical expertise and business understanding.
Strong ownership mindset, delivery discipline and ability to contribute to team knowledge and repeatable IP.
What Makes This Role Unique
Identity specialist role spanning Active Directory, Microsoft Entra security and identity governance — the core of Zero Trust for Nordic customers.
Broad delivery portfolio: assessments, onboarding accelerators, AD recovery and hybrid identity workshops.
Opportunity to lead customers' identity modernization from AD/MIM to the Microsoft Entra Suite and to expand into Security Copilot and identity threat protection.
Location
SWE Work-at-Home
Language Requirements
Time Type
Full time
