Azure AD B2C Lead

Job Title: Azure AD B2C Lead

Location: Hyderabad

Role Overview:

We are seeking a senior Azure AD B2C / Microsoft Entra External ID Lead to take ownership of customer identity architecture, implementation, modernization, automation, and platform operations. The ideal candidate should combine deep hands-on B2C expertise, strong Azure architecture knowledge, security awareness, and technical leadership, while partnering closely with application, API, cloud, security, and platform teams.

Key Responsibilities:

• Own the end-to-end architecture, implementation, modernization, and operations of Azure AD B2C / Microsoft Entra External ID platforms.
• Design scalable CIAM solutions supporting web, mobile, e-commerce, CRM, APIs, microservices, customer support, and connected-device ecosystems.
• Define target-state architecture, reusable patterns, engineering standards, tenant/environment strategy, configuration management, and release governance.
• Design and implement B2C custom policies, IEF, user journeys, technical profiles, claims transformations, REST integrations, identity providers, and orchestration flows.
• Build secure customer journeys covering registration, sign-in, MFA, password reset, profile management, account recovery, account linking, federation, duplicate-account handling, and identity migration.
• Apply strong knowledge of OAuth 2.0, OIDC, SAML, JWT, SSO, MFA, RBAC, ABAC, token/session management, API authorization, and service-to-service authentication.
• Integrate B2C with web/mobile applications, APIs, microservices, API gateways, CRM, CDP, marketing, loyalty, commerce, support, and connected-product platforms.
• Guide application teams on identity SDKs, authentication middleware, app registrations, scopes, API permissions, secure token handling, and delegated/application authorization.
• Automate identity configuration, custom policy deployment, app registrations, secret rotation, environment promotion, testing, validation, rollback, and releases using CI/CD and Infrastructure as Code.
• Provide broader Azure architecture guidance across networking, compute, storage, integration, monitoring, security, scalability, availability, resilience, performance, and modernization.
• Work with Azure Key Vault, Azure Monitor, Application Insights, Azure DevOps, API Management, Azure Functions, Microsoft Graph, and related Azure services.
• Establish identity observability and monitoring for authentication failures, token/policy issues, suspicious activity, and identity-provider failures, integrating with monitoring and SIEM platforms.
• Drive automated diagnostics, remediation, dashboards, alerting, RCA, incident response, runbooks, support processes, and operational readiness.
• Implement Zero Trust, least privilege, PIM, secrets and certificate management, encryption, audit logging, privacy, PII protection, and secure credential lifecycle management.
• Partner with cybersecurity, privacy, legal, and compliance teams to address GDPR, CCPA, regulatory, privacy, and enterprise security requirements.
• Apply FinOps principles to improve cost visibility, optimization, governance, and overall cost efficiency without compromising security, scalability, performance, or reliability.
• Lead architecture reviews, technical decisions, escalations, mentoring, documentation, roadmap planning, modernization, migrations, feature adoption, scalability, and platform maturity initiatives.
• Collaborate with product, engineering, mobile, e-commerce, cloud, platform, infrastructure, security, privacy, and support teams.

Required Technical Skills:

• Deep hands-on experience with Azure AD B2C / Microsoft Entra External ID, including:

• Custom Policies / IEF

• Claims and Claims Transformations

• Technical Profiles

• User Journeys

• REST API integrations

• Identity Providers

• Orchestration Steps

• Strong Customer IAM / CIAM / IAM experience covering authentication, authorization, federation, identity lifecycle, customer profiles, consent, and customer experience.

• Strong Azure architecture and hands-on experience with Azure services and platform dependencies.

• Experience integrating identity platforms with web, mobile, APIs, microservices, and cloud-native applications.

• Strong knowledge of CI/CD, Infrastructure as Code, automation, REST APIs, Azure DevOps, and identity configuration management.

• Strong understanding of identity security, tokens, secrets, encryption, logging, auditing, Zero Trust, and cloud security.

• Ability to combine architecture ownership, hands-on engineering, production troubleshooting, and technical leadership.

Preferred Skills:

• Experience with Microsoft Entra ID, Conditional Access, PIM, and Entra ID Governance.
• Multi-cloud and FinOps experience across Azure, AWS, or other cloud platforms.
• IAM/CIAM migration experience from Okta, Auth0, Ping, ForgeRock, legacy IAM, or custom identity platforms.
• Experience supporting high-volume consumer, e-commerce, mobile, connected-device, or digital platforms.
• Experience integrating with CRM/CDP, marketing, loyalty, commerce, API gateways, microservices, and service-to-service authentication.
• Knowledge of Terraform, Bicep, ARM, PowerShell, Python, GitHub Actions, or similar automation technologies.
• Understanding of GDPR, CCPA, consent management, SIEM/SOC, and enterprise incident management.

Ideal Candidate:

The ideal candidate is a senior Azure AD B2C / Customer Identity technical leader who can take ownership of the platform while remaining hands-on. They should be capable of defining architecture and engineering standards, driving modernization and automation, troubleshooting complex production issues, and providing technical direction across engineering and business teams.