Arbetsbeskrivning

Avaron AB is a growing consultancy focused on technology, finance, and business support. We match your expertise with the market's most interesting assignments, offering a platform where your professional development is central.

We are looking for a Technical IAM Consultant to support daily operations within Identity and Access Management (IAM). You will work in a hybrid identity environment, helping ensure secure and efficient access control aligned with least privilege principles. The role is hands-on and operational, with a strong focus on incident and request handling, troubleshooting, and continuous improvements across the IAM toolset.

• Handle IAM-related incidents and service requests efficiently and with high quality.
• Troubleshoot and resolve identity and access issues across on-premises Active Directory and cloud services.
• Support change management activities for IAM configurations, policies, and integrations.
• Maintain and optimize Conditional Access, Identity Protection, and Access Review policies in Microsoft Entra.
• Optimize and support the use of Microsoft Defender for Identity, including threat investigations and remediation activities.
• Identify and mitigate access risks, including over-privileged accounts, and enforce least privilege.
• Maintain up-to-date operational procedures and contribute to continuous improvement of IAM services.
• Proactively work with vulnerabilities related to identity and access.

• Strong technical expertise in Microsoft Entra, including IdP, MFA, Conditional Access, Identity Governance, and management/optimization of application access.
• Hands-on experience with Microsoft Defender for Identity, including sensor management and threat analytics.
• Solid understanding of access risk.
• Ability to work in a fast-paced environment with a strong operational focus.
• Good conversational and communication skills.

• Active Directory (AD)
• ADFS (Active Directory Federation Services)
• ClearSkye (Identity Governance on ServiceNow)
• CyberArk PAM and/or CyberArk Remote Access
• Microsoft Entra Connect
• ServiceNow (ITSM)
• AD security assessment tools such as PingCastle or Bloodhound
• Microsoft Secure Score

Selections are made on an ongoing basis, so we recommend that you apply as soon as possible.