Azure AD B2C Lead

Role: AZURE AD B2C LEAD
Location: Hyderabad, India

This is a technical leadership role focused on Azure AD B2C / Microsoft Entra External ID, customer identity architecture, hands-on delivery, platform modernization, and cross-functional technical direction. The Lead is expected to establish standards and target-state architecture while remaining sufficiently hands-on to implement, troubleshoot, and drive critical identity initiatives.

What We Need This Lead To Own

• Lead the end-to-end architecture, implementation, modernization, and operational maturity of Boses customer identity platform using Azure AD B2C / Microsoft Entra External ID.
• Serve as the primary technical lead and subject matter expert for Azure customer identity, with strong working knowledge of the broader Azure environment, services, architecture patterns, dependencies, and platform capabilities.
• Design secure, scalable, and seamless authentication and authorization experiences across Bose customer-facing digital platforms, including web, mobile, e-commerce, support, and connected-product ecosystems.
• Provide technical leadership across identity architecture and broader Azure platform decisions, connecting customer identity requirements to cloud, application, API, security, and platform engineering needs.
• Define target-state identity architecture, reusable enterprise patterns, engineering standards, and implementation guidance.
• Remain hands-on with custom policies, integrations, automation, troubleshooting, architecture validation, and critical delivery work.
• Lead technical decisions, architecture reviews, design discussions, and resolution of complex identity and Azure platform issues.
• Apply FinOps principles and practical cloud-security judgment to architecture and implementation decisions.
  

Core Technical Responsibilities

1. Azure AD B2C / Microsoft Entra External ID Leadership & Architecture

• Architect and implement Azure AD B2C / Microsoft Entra External ID tenant configurations for customer-facing applications.
• Own user journeys, custom policies, built-in user flows, identity providers, claims providers, and orchestration steps.
• Build secure authentication experiences for sign-up, sign-in, account linking, password reset, profile updates, and account recovery.
• Configure and optimize social identity provider integrations and other required external identity providers.
• Design scalable identity patterns supporting multiple applications, brands, regions, and customer segments.
• Establish tenant strategy, environment separation, configuration management, release governance, and reusable implementation standards across development, test, staging, and production.
• Lead technical reviews and provide direction to engineers implementing customer identity capabilities.

2. Azure Architecture & Cloud Platform

• Provide architectural leadership beyond B2C, demonstrating strong understanding of Azure services, resources, networking, compute, storage, integration, monitoring, security, and platform dependencies.
• Evaluate architecture choices across the Azure environment and ensure identity services integrate effectively with broader cloud platforms and enterprise applications.
• Guide scalability, availability, resiliency, performance, operational readiness, and platform modernization decisions.
• Translate business and application requirements into secure, scalable, maintainable Azure architecture patterns.
• Collaborate with cloud engineering, platform, application, security, and infrastructure teams on cross-platform architecture decisions.
  

3. Authentication, Authorization, IAM & Customer Identity Experience

• Lead modern authentication patterns including MFA, adaptive authentication, passwordless authentication, biometric authentication support, and risk-based access controls where applicable.
• Define secure session management, token lifecycle, refresh-token handling, logout behavior, and single sign-on patterns.
• Implement and govern OAuth 2.0, OpenID Connect, SAML, JWT, federation, SSO, MFA, and API authorization standards.
• Apply IAM principles to customer and application identity use cases, including authentication, authorization, federation, identity lifecycle, and access controls.
• Architect role-based and attribute-based authorization models for customer, partner, support, and administrative access scenarios.
• Lead customer account linking, identity federation, duplicate-account handling, and account migration strategies.
  

4. Application, API & Digital Platform Integration

• Lead integration of Azure AD B2C / Entra External ID with web applications, mobile applications, APIs, microservices, e-commerce platforms, CRM platforms, and customer-support systems.
• Design secure API access patterns using scopes, app registrations, API permissions, token validation, and delegated/application authorization models.
• Guide application engineering teams on identity SDKs, authentication middleware, authorization controls, and secure token handling.
• Support integrations with customer profile platforms, marketing platforms, loyalty systems, commerce systems, and connected-device ecosystems.
• Define API gateway and backend-service authentication patterns for customer-facing and machine-to-machine interactions.
• Ensure identity architecture supports scalable digital experiences across global markets and high-volume customer traffic.
  

5. Custom Policy Engineering & Identity Automation

• Develop and maintain Azure AD B2C custom policies using Identity Experience Framework (IEF).
• Build reusable policy components, claims transformations, technical profiles, REST API integrations, and orchestration patterns.
• Integrate custom policies with external REST APIs for customer validation, entitlement checks, fraud controls, profile enrichment, consent validation, and account lifecycle workflows.
• Automate tenant configuration, policy deployment, application registrations, secret rotation, and environment promotion using Infrastructure as Code and CI/CD pipelines.
• Build version-controlled deployment patterns for B2C policies, configuration artifacts, and application integration settings.
• Establish automated testing, validation, rollback, and release controls for identity configuration changes.
  

6. FinOps & Cloud Cost Management

• Apply FinOps principles to cloud architecture, resource utilization, cost visibility, optimization, governance, and accountability.
• Evaluate architecture and resource decisions for cost efficiency without compromising security, performance, scalability, or reliability.
• Partner with cloud/platform teams to identify optimization opportunities, establish cost controls, and improve ongoing cloud financial governance.
  

7. Security, Privacy & Compliance

• Apply strong practical cloud-security knowledge to Azure and identity architecture; deep cybersecurity specialization is not required.
• Design identity controls aligned with enterprise security, privacy, and compliance requirements.
• Implement secure handling of customer PII, consent records, preferences, authentication data, and profile attributes.
• Apply least-privilege access, privileged-access controls, certificate management, secret management, and secure credential lifecycle practices.
• Partner with cybersecurity, privacy, legal, and compliance teams to ensure customer identity architecture supports applicable regulatory obligations.
• Define audit logging, monitoring, anomaly detection, and investigation capabilities for authentication events and identity-related security incidents.
• Ensure identity design aligns with Zero Trust principles, secure-by-design practices, and Bose enterprise security standards.
  

8. Monitoring, Observability & Operational Readiness

• Implement monitoring and observability for authentication success/failure rates, policy errors, token issues, suspicious login activity, and external identity provider failures.
• Integrate identity telemetry with enterprise monitoring and logging platforms such as New Relic, LogicMonitor, Azure Monitor, Application Insights, and SIEM platforms.
• Define operational dashboards, alert thresholds, service health monitoring, and incident-response procedures for customer identity services.
• Build automated diagnostics and remediation workflows for recurring authentication, policy, and integration failures.
• Drive reduction of customer-impacting identity incidents through proactive monitoring, root-cause analysis, and resilient architecture patterns.
• Establish runbooks, support procedures, escalation paths, and operational documentation for identity platform support teams.

9. Technical Leadership, Governance & Stakeholder Management

• Define enterprise standards for customer identity architecture, authentication patterns, authorization models, application onboarding, custom-policy development, and release practices.
• Lead architecture reviews for new customer-facing applications and integrations requiring Azure AD B2C / Entra External ID.
• Act as the technical escalation point for complex identity architecture, implementation, integration, and production issues.
• Partner with product, engineering, security, privacy, e-commerce, mobile, cloud, and support teams to translate business requirements into secure identity and Azure solutions.
• Provide technical guidance, design reviews, mentoring, and troubleshooting support to developers, platform engineers, and support teams.
• Document architecture decisions, integration patterns, custom-policy standards, security controls, FinOps considerations, and operational procedures.
• Drive roadmap planning for modernization, feature adoption, migration, scalability, cost optimization, and long-term platform maturity.
  

Required Technical Background

• Hands-on experience in Identity and Access Management, authentication, authorization, customer identity, Azure architecture, or closely related architecture/leadership roles.
• Deep hands-on experience with Azure AD B2C / Microsoft Entra External ID, including claims transformations, technical profiles, REST API integrations, custom user journeys, and identity-provider integrations.
• Strong understanding of customer identity, customer profile management, consent, account lifecycle, and customer authentication experience design.
• Experience integrating identity platforms with web applications, mobile applications, APIs, microservices, and cloud-native platforms.
• Proficiency with Azure services such as Azure Key Vault, Azure Monitor, Application Insights, Azure DevOps, API Management, Functions, and Microsoft Graph.
• Experience implementing CI/CD pipelines and Infrastructure as Code for identity configurations and application integrations.
• Strong knowledge of identity security, token security, secrets management, encryption, logging, auditing, and Zero Trust principles.
• Demonstrated ability to lead technical discussions, influence engineering decisions, and communicate effectively with technical teams, product stakeholders, security teams, cloud/platform teams, and senior leadership.
• Ability to balance architecture ownership with hands-on implementation and production troubleshooting.
  

Preferred Qualifications

• Multi-cloud experience across Azure, AWS, or other major cloud platforms.
• Experience applying FinOps across more than one cloud platform.
• Experience with Microsoft Entra ID, Entra ID Governance, Conditional Access, Privileged Identity Management, or related IAM capabilities.
• Experience migrating customer identity platforms from legacy IAM, custom authentication systems, Okta, Auth0, Ping Identity, ForgeRock, or similar platforms.
• Experience with customer-facing e-commerce, mobile, connected-device, consumer-product, or high-volume digital platforms.
• Experience integrating with CRM, CDP, marketing automation, loyalty, commerce, or customer-support platforms.
• Experience with API gateways, microservices security, service-to-service authentication, and cloud-native authorization.
• Experience with Azure DevOps, GitHub Actions, Terraform, Bicep, ARM templates, PowerShell, Python, or REST API automation.
• Familiarity with privacy and compliance requirements affecting customer identity and PII, including GDPR, CCPA, and consent-management practices.
• Experience integrating identity telemetry with SIEM, SOC workflows, and enterprise incident-management processes.
  

Ideal Candidate Profile

• Senior Azure AD B2C / Customer Identity Lead with deep Microsoft Entra External ID capability and strong broader Azure architecture knowledge.
• A technical leader who can own the customer identity platform, set direction, establish standards, and make architecture decisions while remaining hands-on.
• Strong command of custom policies, Identity Experience Framework (IEF), claims, technical profiles, REST integrations, federation, authentication protocols, and application/API integration.
• An Azure subject matter expert who understands the wider Azure environment rather than focusing only on B2C.
• Able to lead modernization, migration, scalability, operational maturity, automation, and cost optimization initiatives.
• Has sound practical cloud-security judgment and incorporates security, privacy, and resilience into architecture decisions.
• Comfortable leading across digital product, mobile, e-commerce, cloud engineering, cybersecurity, privacy, and customer - support teams.
• Able to simplify complex identity and cloud requirements into scalable, secure, reusable, and cost-conscious technical solutions.
• Strong communicator who can influence technical and non-technical stakeholders, mentor engineers, and document complex architecture clearly.
  

Why This Role Matters

• Lead the evolution of Boses customer identity capability into a secure, seamless, scalable, and enterprise-grade platform.
• Establish standardized customer identity and Azure architecture patterns across web, mobile, APIs, and digital platforms.
• Provide technical leadership for identity modernization, integrations, automation, and operational readiness.
• Strengthen security, auditability, privacy controls, and protection of customer data.
• Improve cloud cost visibility and optimization through practical FinOps discipline.
• Reduce operational risk through automated deployment, monitoring, resilient architecture, and sound cloud-security practices.
• Enable future digital growth through a modern, reusable, enterprise-grade customer identity and Azure foundation.