Azure AD B2C Lead

We are looking for a senior Azure AD B2C / Microsoft Entra External ID Lead who can own customer identity architecture, modernization, implementation, automation, and operational maturity.

The ideal candidate should be deeply hands-on with Azure AD B2C / Entra External ID, Custom Policies, Identity Experience Framework (IEF), Claims, Technical Profiles, REST API integrations, authentication protocols, and customer identity architecture, while also having strong knowledge of the broader Azure ecosystem.

What You Will Be Responsible ForAzure AD B2C / Entra External ID Architecture

• Lead the architecture and implementation of Azure AD B2C / Microsoft Entra External ID for customer-facing applications.
• Design and maintain Custom Policies, IEF, User Journeys, Technical Profiles, Claims Providers, Claims Transformations, and Orchestration Steps.
• Build authentication journeys covering sign-up, sign-in, MFA, password reset, account recovery, profile management, and account linking.
• Configure and integrate external/social identity providers.
• Establish scalable B2C architecture patterns across applications, brands, regions, and environments.

Customer IAM & Authentication

• Design secure customer authentication and authorization experiences across web, mobile, e-commerce, APIs, and digital platforms.
• Implement OAuth 2.0, OpenID Connect/OIDC, SAML, JWT, federation, SSO, MFA, and token-security patterns.
• Design customer identity lifecycle, account linking, duplicate-account handling, federation, and migration strategies.
• Define RBAC/ABAC and authorization models for customer and application scenarios.

Azure Architecture & Cloud Platform

• Provide architectural leadership across Azure services and platform dependencies.
• Work with Azure Key Vault, Azure Functions, API Management, Azure Monitor, Application Insights, Microsoft Graph, and related Azure services.
• Guide scalability, availability, resiliency, performance, security, and modernization decisions.
• Collaborate with cloud, application, platform, infrastructure, and security engineering teams.

Application & API Integration

• Integrate Azure AD B2C / Entra External ID with web applications, mobile applications, APIs, microservices, e-commerce, CRM, and customer-support platforms.
• Design secure API access using scopes, app registrations, API permissions, delegated/application permissions, and token validation.
• Integrate Custom Policies with external REST APIs for validation, enrichment, entitlement, fraud, consent, and customer lifecycle workflows.

Automation & CI/CD

• Automate B2C tenant configuration, Custom Policy deployment, application registrations, secrets, and environment promotion.
• Implement CI/CD using Azure DevOps or GitHub Actions.
• Use Terraform, Bicep, ARM, PowerShell, Python, or REST APIs for identity automation.
• Establish version-controlled deployment, testing, validation, rollback, and release processes.

Security, Privacy & Compliance

• Apply practical cloud-security principles to customer identity architecture.
• Implement secure handling of customer PII, consent, authentication data, and profile attributes.
• Apply least privilege, secrets management, certificate management, Zero Trust, logging, auditing, and secure credential lifecycle practices.
• Support GDPR, CCPA, and enterprise security/compliance requirements.

Monitoring & Operational Readiness

• Monitor authentication failures, policy errors, token issues, suspicious login activity, and identity-provider failures.
• Integrate identity telemetry with Azure Monitor, Application Insights, New Relic, LogicMonitor, and SIEM platforms.
• Develop dashboards, alerts, diagnostics, runbooks, and remediation procedures.
• Troubleshoot complex production identity and authentication issues.

Technical Leadership

• Own customer identity architecture decisions and technical standards.
• Lead architecture reviews and design discussions.
• Mentor engineers and provide implementation guidance.
• Act as the technical escalation point for complex identity and Azure issues.
• Drive modernization, migration, automation, scalability, operational maturity, and cost optimization initiatives.

What We Are Looking For

• Strong hands-on experience with Azure AD B2C / Microsoft Entra External ID.
• Deep experience with B2C Custom Policies and Identity Experience Framework (IEF).
• Strong knowledge of Technical Profiles, Claims Transformations, Claims Providers, User Journeys, and Orchestration Steps.
• Experience integrating B2C with REST APIs and external identity providers.
• Strong understanding of OAuth 2.0, OIDC, SAML, JWT, federation, SSO, and MFA.
• Strong customer IAM / CIAM and authentication/authorization experience.
• Strong Azure architecture knowledge.
• Experience with Azure Key Vault, Functions, API Management, Azure Monitor, Application Insights, and Microsoft Graph.
• Experience with CI/CD and Infrastructure as Code.
• Strong troubleshooting and production-support experience.
• Ability to lead architecture discussions and mentor engineering teams.

Bonus Points

Experience with Microsoft Entra ID, Conditional Access, PIM, Identity Governance, Terraform, Bicep, ARM, PowerShell, Python, GitHub Actions, Azure DevOps, multi-cloud, e-commerce, mobile applications, CRM/CDP, connected-device platforms, SIEM, FinOps, GDPR, and CCPA. Role & responsibilities