Skip to content

Open nowPosted 3 days ago

Engineering Manager - Identity Authorization, Group Digital

IKEA IT Aktiebolag

Where
Helsingborg, Skåne län, Sweden
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowEngineering Manager - Identity Authorization, Group DigitalIKEA IT Aktiebolag · Helsingborg, Skåne län, Sweden
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on IKEA IT Aktiebolag's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 3 days ago

The posting

Who you are Are you passionate about building high performing engineering teams, transforming legacy practices, and shaping the future of Identity & Access Management? We’re looking for an Engineering Manager who can lead our Identity Authorization team. • You are an experienced leader with manager responsibility that is driven by curiosity, customer and security mindset and willingness to continuously improve and explore new ways to protect assets and information. • You love developing digital platform products that are friction free for consumers to implement and provides exceptional user experience for our coworkers. • You are a strong software engineering practitioner at heart, with a solid understanding of how to build reliable, scalable systems and an appreciation for clean code, automation, and DevOps principles. • You are comfortable taking ownership, setting clear technical direction, guiding architectural decisions, and helping the team deliver solutions that balance long‑term strategy with iterative progress. • You communicate clearly, document well, and foster a culture where transparency, learning, and psychological safety are core values. • You are motivated by building sustainable, well‑engineered identity products and continuously improving how they’re delivered and maintained.

THE JOURNEY WE ARE ON Identity & Access Management is a vital part of Ingka Group ensuring a secure and friction free digital identity experience for co-workers and partners. We are converging from siloed IAM capabilities to building unified IAM Platform that provides Identity Governance & Administration (IGA), Sign‑on Experience (Authentication), and Authorization services through self‑service, APIs and golden paths, enabling product teams to build faster and providing a consistent and seamless experience for consumer teams and coworkers. As part of this journey, our teams are moving away from traditional click‑ops towards modern engineering practices where everything is built, configured, and operated through code. Identity & Access Management is part of tech foundation, Technology Services, where we are currently on a journey transforming our operating model to ensure personalized and relevant experience for our business & digital co-workers.

Your responsibilities To play a successful role in this team, we are looking for an Engineering Manager who encompasses: • Leading, planning, and executing on the product roadmap for your engineer team, Identity Authorization, together with the Product Owner • Manage and coach a team of engineers, responsible for end-to-end development and security (DevSecOps) aspects for multiple systems. Systems in scope include both bought platforms and home-grown components. • Collaborate with Cyber, platform, product teams and within IAM to define and implement robust identity and access features. Ensure the team delivers reliable, scalable identity services. • Drive the transition from traditional, manual click‑based operations to infrastructure‑as‑code and fully automated workflows. • Promote engineering excellence through coaching, code reviews, high-quality documentation, automation, observability, and modern development practices. • Set a clear technical direction and help the team execute on long-term architectural improvements. • Ensure the team delivers reliable, scalable identity services (authentication, authorization, lifecycle management, directory services, etc.).

PREFERED EXPERIENCE AND QUALIFICATIONS • 2+ years of experience with engineering within the area of Identity & Access Management • 5+ years of demonstratable experience in working with Software and/or System Engineering environments in complex global organisations, preferably experience with Java Spring/Quarkus, Angular and NodeJS. • Proven experience as a team lead, tech lead, or engineering manager with responsibility for people development and delivery. • Designing and implementing authorization models and services across distributed systems and APIs. • Strong understanding of authorization patterns such as RBAC, ABAC, PBAC and ReBAC, and fine‑grained entitlements. • Experience with policy engines, access decision services, and integrating authorization into platform and product architectures. • Leading teams that build scalable, reusable authorization capabilities for multiple product teams. • Translating business requirements and compliance needs into clear, maintainable authorization models. • Solid understanding of IAM concepts and standards (e.g., SSO, OAuth2/OIDC, SCIM, lifecycle management, RBAC/ABAC) - you don’t need to be a deep IAM expert, but you know how to apply engineering to IAM problems. • Good understanding of security frameworks and standards (e.g., NIST, ISO 27001), with the ability to translate framework principles into practical, engineering-focused controls and design decisions. • Hands-on experience with automation, infrastructure-as-code (e.g. Terraform), CI/CD pipelines, and cloud platforms.

Apply now! The role is based in Sweden, and you will report to the Product Engineering Manager for IAM Platform. "In line with our value of togetherness we believe the best way for us to collaborate and co-create is when we meet in the office. This is why we expect you to spend the majority of time in the office." “In this recruitment there is no relocation support provided by IKEA; hence we are looking for people living in the mentioned location.” Studies show that members of underrepresented communities don’t apply for jobs unless they’re 100% “qualified” from “Why Women Don’t Apply for Jobs Unless They’re 100% Qualified” by Tara Sophia Mohr, August 2014. If this is part of why you hesitate to apply, we would like you to reconsider and give it a chance. Maybe your profile fits our needs much better than you think.

PLEASE NOTE Please respect that, due to GDPR, we cannot review any applications coming to us in other ways than through our recruitment program. We will be interviewing continuously and are looking forward to hearing from you!

Posting text belongs to the employer. Removal requests: contact us.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against IKEA IT Aktiebolag's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on IKEA IT Aktiebolag's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    IKEA IT Aktiebolag's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.