Vacant job

Job Description

We are currently looking for you who want to work on a fun and exciting assignment for our client in Solna. You will work alongside other colleagues in the client's premises in Solna, although some remote work may occur once you are settled in the role and tasks. This is a recruitment assignment where you will be employed directly by the client.

Responsibilities

You will work operationally and consultatively with the design, implementation, operation, and further development of Microsoft-based IT infrastructure, both on-premises and in Azure. The role requires high independence, good documentation skills, and experience working according to established security and governance principles.

Personal Qualities:

• Independent and structured
• Good communication skills, both technical and business-oriented
• Ability to follow and maintain established processes
• Accustomed to working with security, risk, and compliance as basic requirements

Languages:

• Fluent in Swedish and English, both written and spoken

Qualifications

Required skills for the role:

Entra ID (Identity and Access)

• Practical experience with security configuration in Entra ID
• Experience with: Conditional Access policies for various risk and access scenarios, MFA strategies (including passwordless solutions like FIDO2, passkeys, Windows Hello for Business), Privileged Identity Management (PIM) for roles and access, Role-Based Access Control (RBAC) following the Principle of Least Privilege (PoLP), management of external users (B2B) and guest policies, and experience with incident and access auditing via sign-in and audit logs.

Azure and Cloud Infrastructure

• Practical experience with Microsoft Azure in production environments
• Experience with: Azure Landing Zone according to Microsoft's reference architecture, Management Groups, subscriptions, RBAC, and policies, networking (VNET, peering, VPN, ExpressRoute, AppGW, Load Balancers), and experience with Infrastructure as Code (IaC) such as Bicep or Terraform (advantageous).

Intune and Client Management

• Experience with Microsoft Intune (Endpoint Manager)
• Management of: Windows 11 Configuration Profiles, compliance policies, and security baselines, application deployment and updates, and configuration and management of security-related Intune policies.
• Experience with: Compliance policies and device health-based requirements, security baselines for Windows, Endpoint security policies (attack surface reduction, firewall, disk encryption).
• Integration of Intune with Conditional Access (device trust scenarios).
• Management of different device types and ownership models.
• Understanding of lifecycle management from a security perspective (onboarding, change, offboarding).

Windows-based Infrastructure (On-Premises)

• Experience with classic Windows environment: Active Directory Domain Services, DNS, DHCP, GPO.
• Experience with Active Directory Certificate Services (AD CS): Basic design and management of internal PKI, management of certificate templates, issuance, and lifecycle, as well as understanding of certificate usage for authentication.
• Troubleshooting and lifecycle management of Windows Server.
• Integration between on-premises AD and Entra ID (Entra Connect).

PowerShell

• Very strong PowerShell skills. Experience with: Automation of administrative tasks, scripts for Azure, Entra ID, Intune, and Windows Server, as well as structuring, error handling, and version control of scripts.

Virtual Desktop Infrastructure (VDI/DaaS)

• Experience with design, implementation, operation, and management of virtual desktop solutions in production environments. Practical experience with one or more platforms, such as Citrix Virtual Apps and Desktops or Azure Virtual Desktop (AVD).
• Windows 365: Understanding of different delivery models (session-based and personal desktops), application publishing vs. full desktop, knowledge of architecture, capacity planning, and performance in VDI environments.
• Experience with image management, updates, and lifecycle management.
• Integration with identity and access services: Active Directory and Entra ID, Conditional Access, MFA, and device-based access requirements, Citrix Federated Authentication Service (FAS).
• Experience with user profile management and policy control.
• Troubleshooting connectivity, performance, and user experience.
• Understanding of security, access, and data protection in virtual workplace solutions.

About the Company

Randstad

At Randstad, we know that every person has a place in the labor market. With operations throughout the country and within all competency areas, we help people find a job that feels right, where they have the opportunity to grow, develop, and reach their full potential.

With nearly 600,000 employees in 38 countries, Randstad is the world leader in HR services, with the goal of becoming the world's premier and most appreciated partner in the labor market. By combining our passion for people with the power of today's technology, we help people and companies achieve their full potential. We call it Human Forward.