Senior IAM / Identity Architect & Implementation Specialist for OKQ8

Project overview

Overall Assignment Description

We are currently mobilizing a large and business-critical transformation program within Tech, related to changes in our Nordic business portfolio.

The program encompasses a complex IT environment and affects applications, infrastructure, cloud, data, integrations, identity, and security, among other areas.

We are looking for a highly experienced IAM / Identity Architect & Implementation Consultant for a comprehensive separation initiative within Active Directory, Microsoft Entra ID, and Microsoft 365.

The assignment involves analyzing, designing, and implementing a separation of the existing identity and Microsoft 365 environment. The role requires a combination of strong architectural ability and documented hands-on implementation experience. The consultant is expected to take overall technical responsibility from current state analysis and target architecture to migration, implementation, cutover, and handover to operations. This is not a purely architectural or advisory role. The consultant should be proactive and operationally involved in the technical execution.

Main Responsibilities

Analysis

Architecture & Design

Execution & Migration

The supplier/consultant undertakes to:

a) actively participate in workshops and meetings with representatives from OKQ8;

b) independently drive the assignment through cross-functional collaboration within OKQ8;

c) adhere to the agreed timeline and deliver in accordance with it;

d) perform all parts of the assignment in a responsible and professional manner and with the skill, speed, and care that OKQ8 has reason to expect from a reputable consultant in the industry.

Place of Performance

The consultant shall perform the assignment at OKQ8's premises at Sveavägen 155, remote work may occur and will be approved upon agreement with the project's planning.

Mandatory Requirements

Documented experience of having previously completed at least one

major technical separation or equivalent transformation journey covering multiple areas of the Mandatory Requirements. Previous practical experience of a comparable large-scale separation is an important mandatory requirement and must be verifiable through previous reference assignments.

Experience solely from architecture, consulting, or smaller migration projects is not

sufficient.

Experience with Active Directory

Experience with Microsoft Entra ID

Experience with Microsoft 365/ Office 365

Experience with Hybrid Identity

Experience with Tenant and/or Forest Separation

Experience with Identity Synchronization and Authentication

Experience with Microsoft 365 Tenant-to-Tenant Migration

Experience with Complex Application and Identity Dependencies

Experience with Migration Planning and Technical Cutover.

Desirable Requirements

Very high competence in Active Directory Domain Services

Very high competence in Identity Lifecycle Management

Very high competence in PowerShell and Automation

Strong practical experience of AD Forest / Domain Migration

Extensive practical experience of Cross-Tenant Identity

Extensive practical experience of Microsoft 365 Tenant-to-Tenant Migration

Extensive practical experience of Exchange Online

Very high competence in Microsoft Entra ID

Very high competence in Microsoft 365 / Office 365

Very high competence in Hybrid Identity

Very high competence in Entra Connect / Cloud Sync

Very high competence in Authentication & Federation

Very high competence in Conditional Access

Very high competence in MFA

Very high competence in Privileged Identity Management

Very high competence in DNS, Domains, and AD Trusts

Extensive practical experience of Teams

Extensive practical experience of SharePoint Online / OneDrive

Extensive practical experience of Enterprise Applications

Extensive practical experience of Service Accounts / Non-Human Identities

Extensive practical experience of Migration Tools and Automation

Very high competence in Group Policy

Extensive practical experience of Zero Trust and Modern Identity Principles.

Other Requirements

Please attach CV in Word format under the Documents tab. The CV is an important part of the evaluation of the consultant. It should clearly show that the consultant has the competence and experience requested for the assignment.

Offers for this assignment must be submitted via KeySourcingTool. Responses via email will receive limited feedback.

Please briefly describe in the 'Comment' section for each requirement how the consultant meets it.

The supplier certifies that liability insurance is in place covering this type of assignment according to industry standards.

The supplier hereby assures that all consultants provided within the scope of the Request for Purchase have undergone, in accordance with the Supplier's current internal procedures, customary and relevant background checks, and that this check, to the best of the Supplier's knowledge, has not revealed any circumstances affecting the Consultant's suitability to perform the assignment.

The supplier further certifies that all information in the respective consultant's curriculum vitae (CV) and other documents provided to the Client, to the best of the Supplier's knowledge at the time of submitting the bid or order, is correct, complete, and truthful.

Personal Qualities

We are looking for a senior and self-driven consultant who can move between strategic

architecture and technical execution.

A profile accustomed to taking end-to-end technical responsibility and driving their area of responsibility within the program.

Ability to switch between different roles, from architecture, detailed design, implementation to troubleshooting.

Ability to easily translate business requirements into technical architecture and to pedagogically explain and draw.

Ability to independently drive complex technical issues.

Ability to coordinate dependencies between different areas within the project: Identity, Infrastructure, Security, Workplace, Application & Data.

Ability to drive technical decisions and recommendations.

Ability to work structurally in a complex enterprise environment with high demands on security and availability.

Other Information

KeyMan is the exclusive supplier to OKQ8 for this request. Please do not contact the client or other representatives within OKQ8 regarding this assignment. All communication and process management will be handled by KeyMan.

Option for Extension

The client has the right (option) but no obligation to extend the Assignment.

ANY OTHER INFORMATION IMPORTANT FOR THE ASSIGNMENT.

Overtime is compensated only by agreement between the client and supplier.

Travel expenses by agreement.

Bank-related consulting assignments

OKQ8 has assessed that the consulting assignment will benefit OKQ Bank and therefore the Consultant will need to sign a confidentiality agreement upon contract signing.

• Conduct current state analysis of AD, Entra ID, and Microsoft 365.
• Map identities, domains, trusts, authentication flows, and synchronization.
• Identify dependencies on applications, client environment, infrastructure, and security solutions.
• Map service accounts, privileged identities, and hybrid identity dependencies.
• Identify technical risks, dependencies, and limitations prior to separation.
• Develop target architecture for Identity & Access Management in the new environment.
• Design the target state for Active Directory and Microsoft Entra ID.
• Design principles for separation of Microsoft 365 and tenant.
• Define identity synchronization, authentication, and access model.
• Design administrative models, privileged access, and security boundaries.
• Define coexistence and transition solutions where required.
• Develop migration strategy, migration waves, cutover plan, and rollback strategy.
• Lead and actively participate in the technical implementation.
• Establish and configure the target environment for AD and Entra ID.
• Implement identity synchronization and authentication solutions.
• Execute migration/separation of users, groups, devices, and service accounts.
• Drive identity-related parts of Microsoft 365 tenant-to-tenant migration.
• Manage dependencies on business-critical applications and integration solutions.
• Perform technical testing, verification, and cutover.
• Troubleshoot complex identity, authentication, and access problems during migration.
• Ensure a controlled transition to operations and management.

Project details

• Start: 2026-11-23
• Remote: onsite
• Location: Stockholm Sweden, Sweden, SE
• Languages: Swedish