R&D production systems, CI/CD pipelines, and service-to-service integrations often rely on long-lived credentials, which can be exposed, misused, or remain valid beyond their intended purpose. Modern public cloud architectures address this with workload identity federation, giving workloads short-lived credentials and shifting the focus from rotating secrets to governing trust relationships.
This thesis explores how these principles can be extended to R&D production environments and combined with Just-in-Time (JIT) and Just-Enough Access (JEA) to reduce persistent credentials and standing privileges.
You will investigate and evaluate an architecture for continuous, risk-adaptive workload authorization:
Workload Identity → Federation → JIT/JEA Authorization → Continuous Risk Evaluation → Adaptive Enforcement
Your work will focus on how federation, JIT/JEA authorization, and AI-assisted risk evaluation can reduce reliance on persistent credentials while enabling adaptive control of production access. You will also examine which federation patterns transfer to R&D, how JIT and JEA apply to non-human identities, which signals should trigger reassessment of trust, and how far AI-assisted analysis can support automated restriction or revocation without losing explainability, predictability, or reliability.
The expected outcome is a reference architecture and governance model for continuous workload trust, supported by an empirical evaluation of its security and operational characteristics.
Why join Ericsson?At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.
What happens once you apply?Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.
Primary country and city: Sweden (SE) || Linköping
Req ID: 792245
The future of mobile isn’t on the horizon, it’s happening now. At Ericsson, we’re building the foundation for an open network ecosystem where industries, developers, and enterprises thrive.
The convergence of 5G, AI, cloud, and network APIs isn’t just a technological shift; it’s a transformation that is redefining industries and enhancing everyday life. Open, programmable networks are enabling real-time innovation and unlocking new business models across the globe.
Imagine a world where developers can dynamically access network capabilities on demand, where enterprises don’t just use connectivity but shape it. This isn’t a distant vision, it’s the ecosystem we’re creating today.
Collaboration fuels everything we do. By working across industries, we’re designing a future where connectivity isn’t just seamless. It’s intelligent, programmable, and transformative.
The shift is happening. Are you part of it?
