IT Security Specialist
# IT Security Specialist **Cubane Solutions AB** · Stockholm · `On-site` 🕒 **Статус:** *Опубликовано: 8 дней назад* · *Источник: Indeed* --- ### About the Role Responsibilities - Own the technical design and continued development of the Microsoft Entra Global Secure Access platform. - Design and maintain scalable Entra Private Access architecture, including Private Network Connectors, connector groups, high availability, failover, capacity planning, application segmentation, and regional/data-centre resilience. - Configure and govern access to applications using Microsoft Entra ID, security groups and application assignments, Conditional Access, device compliance, multifactor authentication, and Zero Trust principles. - Lead the onboarding and migration of internal applications from VPN and similar solutions to Private Access. - Analyse application connectivity requirements, including DNS, TCP/IP, ports, routing, authentication, and TLS. - Establish technical standards, configuration baselines, deployment patterns, and rollback procedures. - Monitor platform health, connector availability, capacity, traffic flows, authentication, and policy synchronisation. - Lead complex incident resolution, root-cause analysis, and problem management. - Develop and maintain operational documentation, runbooks, troubleshooting guides, and support procedures. - Support security assessments, risk management, audit activities, and service readiness reviews. - Coordinate technical activities with Microsoft Support and internal platform teams. - Contribute to future expansion of the service, including Entra Internet Access where relevant. - Mentor other engineers and promote knowledge sharing across the organisation. - Ensure changes are implemented through appropriate change-management and release processes. Required Skills Microsoft Entra & Identity - Strong hands-on experience with Microsoft Entra ID in a large enterprise environment. - Practical experience with identity-based access control, security groups, application assignments, and entitlement models. - Strong understanding of Conditional Access, including user, device, location, risk, and session-based controls. - Experience implementing or operating multifactor authentication and Zero Trust access controls. - Good understanding of device identity and compliance, preferably involving Microsoft Intune and Microsoft Defender. Global Secure Access & Private Access - Hands-on experience with Microsoft Entra Global Secure Access, Entra Private Access, or a similar Zero Trust Network Access (ZTNA) solution. - Practical understanding of Private Network Connectors, connector groups, connector registration, certificates, and outbound connectivity. - Experience designing for high availability, failover, resilience, and capacity management. - Ability to troubleshoot traffic forwarding, policy synchronisation, and application connectivity issues. Networking & Application Connectivity - Strong knowledge of DNS, TCP/IP, routing, firewalls, ports, TLS, and HTTP/HTTPS. - Experience troubleshooting connectivity to internal applications, servers, databases, or infrastructure services. - Understanding of network segmentation and access control for different application and user groups. - Ability to analyse technical requirements for applications such as file services, RDP, engineering tools, databases, and enterprise platforms. Operations & Service Management - Experience operating business-critical services in production. - Strong skills in monitoring, logging, incident management, and root-cause analysis. - Experience with change management, release management, technical documentation, and operational handover. - Ability to define support models, runbooks, escalation paths, and service-management processes. - Experience working with Security Operations or SOC teams during investigations and incidents. Technical Leadership & Collaboration - Demonstrated experience as a Technical Lead, Platform Lead, or Senior Engineer. - Ability to make sound technical decisions and communicate them clearly to technical and non-technical stakeholders. - Experience coordinating work across Identity, Network, Endpoint, Security, Infrastructure, and application teams. - Strong ownership mentality and ability to work independently in a developing product area. - Ability to mentor engineers and establish consistent technical ways of working. Desired Skills - Experience with privileged access management, PIM, JIT access, and access governance. - Experience with ServiceNow, Jira, or similar IT service-management and workflow platforms. - Knowledge of ISO 27001, NIST Zero Trust, DORA, GDPR, or similar security and compliance frameworks. - Experience with risk assessments, BIA, TVA, IRAM, or comparable information-security processes. - Experience supporting macOS and Windows access scenarios.
Наблюдалась 2026-10-07, впервые 2026-09-28, источник — Indeed.