Lead Software Engineer & Solution Architect · Stockholm
Independent consultant designing and building secure, scalable and maintainable systems — with Java, IAM and modern web at the core.
Background
Lead Software Engineer and Solution Architect, in the industry since 2014 and consulting through my own company, NIFI. Specialised in Identity and Access Management — OAuth 2.0, OpenID Connect, WSO2 Identity Server and BankID — built on Java, Spring Boot and microservices in Azure, with Angular on the front end. There the work is the application layer: forms and validation, API integration, routing and guards, and session and token handling — implemented from a given design.
Technical lead for IAM at Vattenfall since 2023, responsible for solution design, architecture strategy, coding standards and mentoring within the team, and for the daily work with security, compliance, enterprise architecture and the business. Quality and maintainability come first: solutions that hold up to security and GDPR requirements, and that are still straightforward to work on long after delivery.
Technologies & practices
Career history
NIFI
My own consultancy, delivering software engineering and IT services to clients. Started it for the freedom to choose my own assignments and for the responsibility that comes with owning the result end to end. Every assignment listed below since 2018 is delivered through NIFI.
Vattenfall
Technical lead for Identity and Access Management, responsible for how authentication and authorisation are designed, delivered and maintained across every application in Sweden and Finland — around ten applications serving some 1.5 million users.
Vattenfall
Part of the team responsible for Identity and Access Management across the company's applications, built on the open-source WSO2 Identity Server.
Åhléns AB
Back in the same team as in 2016, now responsible for maintaining, debugging and further developing all the Java applications we had built — mainly Spring Boot microservices, among them the service keeping item counts in step across stores and the one handling members' loyalty points. Both are still in production.
Lantmännen
Built a proof of concept showing what Auth0 could and could not do as their identity provider — the capabilities, the pitfalls and the trade-offs either way. The brief was to give Lantmännen the basis for the decision rather than to make it. Ran alongside the Åhléns assignment.
UC AB
A KYC (Know Your Customer) system for Sweden's leading credit information agency, letting banks and other companies run customer due diligence under anti-money laundering regulation. One of two backend developers and the one writing the code full time, while the other worked mainly as solution designer — a microservice architecture with automated processes and event monitoring, BankID authentication, and several integrations with external services to fetch and validate the data. It went live, and the product and the team behind it were later spun out into a company of their own, with the banks that owned UC as shareholders.
Åhléns AB
One of the developers in an agile team building a new system for club member loyalty points and the receipt transaction flow. The applications were mainly REST APIs. Built from scratch rather than replacing anything older, and still running today.
Omegapoint
A trainee program tailored for engineers who want to work as consultants. Together with other junior developers, delivered a proof of concept for handling CA certificates — a web interface taking relying parties through generating and issuing new certificates — alongside courses in continuous integration, domain driven design, test driven development and Git.
CGI
Worked with customers such as AFA Försäkring, Tele2 and Unionen to automate data and document processing flows, building pipelines that transform data from one format to another with the Quadient Inspire suite, then called GMC Inspire. Among them the digital handling of CSN's mailings nationwide, and the invoice flow for Tele2. My first long-term role, and where I learned how to work in a professional organisation.
KTH Royal Institute of Technology
Built a web platform for professor Mats Brorsson where students submit programming assignments. The service runs each submission on a supercomputer in a controlled environment and reports the result back. Delivered administration, source code submission, execution, result feedback, self-registration for users and registration of new courses and labs.
Credentials
Dataföreningen Kompetens · Iasa Global
A five-day architecture programme built by architects for architects — the Iasa Core curriculum, also known as Iasa Foundation, taken through Dataföreningen Kompetens who deliver it in Sweden. Took it to grow into the solution architect role, and what stayed with me is how much of that role is not technical: understanding what other roles are responsible for, what matters to them, and how to communicate across them. Attended and completed the course; the CITA-Foundation exam is separate and I have not sat it.
Ribomation
Four days on building single-page applications with Angular. Taken because the Vattenfall assignment needed it, and it has been my front-end framework ever since.
Keith Casey · LinkedIn Learning
An advanced course on implementing OAuth 2.0 and OpenID Connect correctly — choosing the right grant type for each use case, protecting secrets, and avoiding the misunderstandings that make OAuth implementations fragile. This is daily work, and it maps closely to the IAM platform at Vattenfall.
Yenlo
Level 1 vendor training on the identity platform behind most of my IAM work: two days of hands-on labs on the platform's core. Have worked with WSO2 Identity Server in production ever since, at Vattenfall from 2018 to today.
Ribomation
Three days on running Jenkins as a CI/CD server. Still familiar ground, though Azure DevOps is where my pipeline work has happened since.
Oracle
Builds a foundational understanding of Java and general programming, demonstrating proficiency in object-oriented programming concepts and the Java language fundamentals. Earned by passing the Java SE 8 Programmer I exam (1Z0-808).
Scrum Alliance · course taken at Crisp
A Certified ScrumMaster® helps teams properly use Scrum, increasing the likelihood of the project's overall success. CSMs understand Scrum values, practices and applications, and act as servant leaders helping the team learn the framework. In practice I work alongside Scrum Masters rather than as one — at Vattenfall, keeping other teams in step with what the IAM platform delivers and when, so they can consume it as soon as it lands.
Dataföreningen Kompetens
Three days on information security from a strategic standpoint — what information is worth, and how the risks against it are understood and handled. It sits directly under the IAM work: an access decision is only as good as the understanding of what is being protected.
KTH Royal Institute of Technology
A three-year engineering degree covering the technologies that build and enable the Internet, with emphasis on software and application development, computer networks and infrastructure.
KTH Royal Institute of Technology
A separate three-year programme taken alongside the engineering degree, delivering a broader qualification than a traditional engineering programme and aligned with the international Bachelor's degree structure recognised worldwide.
Outside the assignments
Omegapoint
Mentored new employees as they started their first job as IT consultants.
Jfokus
Jfokus is Sweden's annual conference for people who work with Java development. Part of the crew running the event two years in a row.
Björkudden transit
A transit home for unaccompanied refugee children who had sought asylum in Sweden.
AFGUF
AFGUF is an association working to integrate young people into society, guiding them in the right direction through activities such as maths lessons and sports. As their IT technician, maintained and solved the association's IT issues, and sat on the board as secretary between 2007 and 2009. Also taught subjects including Mathematics A and B, computer studies and Physics A. From 2009 to 2011, stayed on to look after their website.