Identity Security (IAM) Engineer

At Schibsted, cybersecurity is about more than protecting systems and applications. It's also about protecting journalism, the people behind it, and the technology that makes independent news accessible to millions of people.

We're looking for Identity Security Engineers to join our cybersecurity team in Stockholm or Oslo. This is an opportunity for someone with hands-on Identity and Access Management (IAM) experience who wants to help shape how we manage identity security across a large technology organisation. We're looking for colleagues at different experience levels, including a senior engineer.

Schibsted is one of the leading media groups in the Nordics, home to well-known news brands including Aftonbladet, Svenska Dagbladet, VG and Aftenposten. Every day, millions of people turn to our news organisations to stay informed, understand the world around them, and access independent journalism. Behind these brands is a large and diverse technology organisation, building and maintaining the digital products, platforms and infrastructure that make all of this possible.

And with that comes an interesting security challenge.

Our news brands are highly visible, and the threats we face go beyond those of a typical corporate environment. From protecting applications and user data to safeguarding journalists and ensuring uninterrupted access to news, cybersecurity plays an important role in keeping our journalism accessible and independent.

That's where you come in.

As an Identity Security Engineer, you'll help make sure the right people have access to the right systems and information, while keeping unauthorised access out. You'll be part of a cybersecurity team working across Sweden and Norway, collaborating with colleagues across technology and the wider organisation.

A big part of your job will be designing, implementing and managing IAM solutions. But strong access controls are only part of the picture. You'll also work with the people who rely on those systems, helping teams understand access requirements, resolve issues and put practical processes in place. That means balancing security with the everyday needs of journalists, editors and technology teams.

Since Schibsted is a large organisation with many different brands, products and technologies, no two challenges will necessarily look the same. Depending on your experience, you'll also have the opportunity to guide colleagues and help shape how we approach identity and access management across the organisation.

• Implement and manage IAM systems, covering user provisioning, authentication, authorisation and access rights.
• Develop and maintain IAM policies, procedures and standards that support secure access across our infrastructure and applications, in line with regulatory requirements and industry best practices.
• Monitor IAM systems and access logs, investigate unusual activity and respond to unauthorised access attempts and security incidents.
• Support teams with access requests, access reviews and identity governance, helping them understand requirements and find practical solutions.
• Work with external auditors and regulatory bodies on security audits and assessments.
• Share knowledge and contribute to a stronger security culture where managing access responsibly becomes a natural part of how we work.

Who we're looking for

You might have a few years of experience in identity and access management and be ready to take on broader responsibility. Or you might be a more experienced IAM engineer who enjoys shaping solutions, improving processes and sharing knowledge with others. What matters to us is your practical understanding of IAM, your ability to solve problems, and your interest in making secure access work for the people who depend on it.

• A few years of experience in IAM roles, with hands-on experience designing, implementing and managing IAM solutions in enterprise environments.
• A working knowledge of IAM technologies and protocols, for example: LDAP, SAML, OAuth, OpenID Connect and multi-factor authentication (MFA).
• An understanding of identity governance, access and entitlement management, and privileged access management (PAM).
• Hands-on experience with IAM platforms such as Okta, Azure Active Directory, SailPoint or ForgeRock.
• An analytical approach to troubleshooting and problem-solving, with the ability to prioritise when several tasks need your attention.
• The ability to explain technical concepts clearly and collaborate with both technical and non-technical colleagues.

Relevant certifications such as CISSP, CISM or CIAM are also valuable, as is an understanding of the particular security challenges facing a media organisation, but neither is a requirement.

We're looking for someone who's proactive, collaborative and interested in improving how things work. Someone who doesn't just want to put access controls in place but enjoys working with others to make sure they're effective and practical.

Work that matters. The technology you help protect supports independent journalism and news organisations that play an important role in society.

Interesting security challenges. You'll work across a diverse technology landscape, with different brands, systems and access needs.

An opportunity to grow. You'll develop your IAM expertise through hands-on work across a large technology organisation, collaborating and sharing knowledge with cybersecurity colleagues.

A role that combines technology and people. You'll get to dive into technical identity and access challenges while helping teams find secure ways to do their everyday work.

Room to make an impact. You'll help shape our IAM solutions, processes and ways of working. For more experienced engineers, that also means an opportunity to guide colleagues and contribute to the team's development.

If this sounds like the kind of challenge you'd enjoy, we'd love to hear from you.

Please reach out to our recruitment partner, Amanda.kjaernes@keystones.no, if you have any question about the role.