Senior IAM & Identity Governance Specialist

Cyber Instincts is a Gothenburg-based cybersecurity consultancy helping organizations build digital resilience across IT, OT, and automotive environments. We work with clients in automotive, manufacturing, banking and finance, retail, and healthcare, offering everything from penetration testing to Cybersecurity-as-a-Service. We're building our senior bench for upcoming client engagements centered on enterprise Identity & Access Management- large-scale identity governance, access control design, and Zero Trust architecture. If you've led IAM transformation work rather than just operated within it, we want to hear from you.
What the work looks like:

Designing and implementing Conditional Access policies, MFA enforcement, and device compliance models at enterprise scale


Leading Privileged Access Management (PAM) and Just-In-Time Access design using PIM in Microsoft Entra ID (or equivalent platforms)


Owning identity governance processes: access reviews, provisioning/deprovisioning lifecycles, and role-based access models across large user populations


Advising on and implementing Zero Trust architecture across hybrid on-prem/cloud environments


Working with Microsoft Defender XDR / Defender for Endpoint to align identity and endpoint security postures


Acting as the technical bridge between IT operations, security leadership, and compliance functions


What you'll bring:

7+ years of hands-on identity and access management experience, with at least 3 years at a senior/lead level


Deep, demonstrable experience with Entra ID / Azure AD, Active Directory, or equivalent enterprise identity platforms (Okta, Ping Identity, SailPoint)


Practical experience designing Conditional Access, PIM/JIT Access, SSO, and FIDO2-based authentication - not just administering existing setups


Solid understanding of identity governance frameworks and how they intersect with compliance requirements (NIS2, DORA, ISO 27001)


Comfortable owning incident response coordination involving identity-related compromises


Strong communication skills - you'll regularly translate identity risk into terms both engineers and executives act on


A plus, not a requirement:

Microsoft certifications (SC-300, AZ-500) or equivalent


Experience with Azure Arc, Intune/MDM at scale, or PowerShell/Graph API automation


Prior consulting experience across multiple client environments


This is a Sweden-based, on-site role with placements at client sites across the country. Applicants must currently reside in Sweden. You'll be employed or engaged on a freelance basis and placed directly with our clients for the duration of each engagement.