Security Architect, Identity & Access Management (IAM)
HI3G Access AB · Stockholm · Tills vidare · Deadline 2026-11-01
HI3G Access AB (Tre) is seeking a **Security Architect, Identity & Access Management (IAM)** to take enterprise-wide ownership of its long-term IAM direction across Sweden and Denmark. Based in **Stockholm, Malmö, Gothenburg/Mölndal, or Copenhagen**, this senior role guides strategic decisions and aligns long-term architecture with practical execution. The architect will define target architectures, strategic roadmaps, and reference patterns for workforce, customer, partner, and machine identities across applications, APIs, and cloud platforms. Key duties include setting architectural direction for hybrid identity, privileged access, and non-human identities, establishing governance and authentication patterns, and driving secure-by-design, Zero Trust, and NIS2-aligned principles alongside cybersecurity, platform, and engineering teams. Candidates must have substantial background in enterprise architecture, security architecture, and IAM, supported by **strong experience with Microsoft Entra ID, Active Directory, and hybrid identity**. The role requires practical knowledge of OAuth 2.0, OpenID Connect, SAML, and SCIM, an understanding of PAM and PIM, and hands-on experience with identity governance and access lifecycles. Fluency in English and strong stakeholder management skills are mandatory. Experience with customer or B2B identity, work in telecom or regulated environments, cloud security architecture, and certifications such as CISSP, SABSA, TOGAF, or Microsoft credentials are advantageous.
Shape the future technology landscape at TreTre is strengthening its architecture function to support major transformation initiatives across Sweden and Denmark.
We are modernising our technology landscape, investing in cloud, AI, digital capabilities and long-term architecture to support future growth.
As part of this journey, we're looking for a Security Architect, Identity & Access Management who wants to help shape the future of one of the Nordic region's leading telecom operators.
Identity & Access Management (IAM) is a foundational capability for customer experiences, employee productivity, APIs, cloud platforms and secure digital transformation.
This is a senior architecture role with enterprise-wide ownership of Tre's long-term IAM direction across Sweden and Denmark.
About our architecture communityAt Tre, architecture is evolving into a stronger advisory capability with greater influence across business and technology.
Our architects help create clarity, guide strategic decisions and connect long-term direction with practical execution. You will work alongside Enterprise Architects, Domain Architects, Technology Architects, engineering teams and senior leaders to shape the future technology landscape across Sweden and Denmark.
This is an opportunity to join a growing architecture community with increasing impact on technology strategy, transformation initiatives and business outcomes.
About the roleAs our Security Architect, Identity & Access Management, you will own the enterprise IAM target architecture, strategic roadmap and reference patterns across Sweden and Denmark. You will play a key role in strengthening Tre's security architecture by ensuring that identity, authentication, authorisation and privileged access are managed in a secure, scalable and compliant way across the organisation.
You will help define how workforce, customer, partner and machine identities are managed across applications, APIs, platforms and cloud environments.
Working closely with Cybersecurity, platform teams, architects and engineering teams, you will establish a coherent approach to authentication, authorisation, identity governance and privileged access.
While major transformation programmes will be an important part of your work, your accountability remains enterprise-wide and long-term.
What you'll do
In this role, you will:
- Define and evolve the enterprise IAM strategy, target architecture and roadmap.
- Define architecture direction for Microsoft Entra ID, Active Directory and hybrid identity.
- Establish authentication, authorisation and identity-governance patterns.
- Define architecture for privileged access and non-human identities.
- Maintain IAM principles, standards and reference architectures.
- Support strategic transformation initiatives with IAM expertise.
- Work closely with Cybersecurity, platform teams, architects and engineering teams.
- Drive secure-by-design, Zero Trust and NIS2-aligned architecture principles.
You can look forward to:
- Enduring ownership of a business-critical enterprise capability.
- The opportunity to shape IAM across customer, workforce, partner, API and cloud environments.
- Close collaboration with Cybersecurity, Enterprise Architecture and transformation programmes.
- Complex architecture challenges involving identity governance, privileged access and distributed authorisation.
- The opportunity to establish IAM as a strategic business capability across Tre.
- Significant autonomy and influence within your area of expertise.
Mats describes himself as a leader:"I believe great architects create clarity rather than complexity. We provide advisory and ‘marriage counseling’ for IT and Business. I value curiosity, accountability and collaboration, and I encourage people to challenge established ways of working when there is a better path forward. My role as a leader is to provide direction, remove obstacles and create an environment where people can have real impact and grow in their area of expertise."
We believe you have
Must-have:
- Experience in enterprise architecture, security architecture and IAM.
- Strong experience with Microsoft Entra ID, Active Directory and hybrid identity.
- Practical knowledge of OAuth 2.0, OpenID Connect, SAML and SCIM.
- Experience with identity governance, access lifecycle and access reviews.
- Understanding of PAM, PIM and privileged access management.
- Ability to balance strategic architecture with pragmatic delivery.
- Strong stakeholder-management and communication skills in English.
Nice-to-have:
- Experience with customer, B2B or partner identity.
- Experience in telecom or another regulated environment.
- Knowledge of Zero Trust, NIS2 and GDPR.
- Experience with cloud and application security architecture.
- Microsoft, CISSP, SABSA or TOGAF certifications.
Who you are
We're looking for someone who:
- Thinks strategically while remaining pragmatic.
- Creates clarity in complex environments.
- Builds strong relationships across business and technology.
- Balances security, user experience and delivery speed.
- Is comfortable challenging fragmented or overly local solutions.
- Is curious, proactive and driven by continuous improvement.
You communicate in terms of outcomes and trade-offs rather than products and technical controls. You help teams move forward within clear and secure guardrails.
LocationThe position can be based in Stockholm, Malmö, Gothenburg/Mölndal or Copenhagen. We welcome applications from candidates based in either Sweden or Denmark.
Welcome with your application!