Job Summary

This role is for a Principal Architect focused on designing secure scalable and resilient identity solutions using Azure AD B2C and Entra ID for a global enterprise client in a hybrid work model. The architect will collaborate with cross functional teams to modernize authentication journeys enhance security posture and simplify user experiences while aligning with enterprise standards.

Responsibilities

Design end to end identity and access management architectures using Azure AD B2C and Entra ID that align with enterprise security and compliance standards and support future scalability
Drive definition of authentication and authorization flows for web and mobile applications using Azure AD B2C policies to deliver consistent and secure user journeys
Develop reusable architecture patterns and reference implementations for common identity scenarios enabling product teams to adopt secure by design practices
Coordinate with application and security teams to integrate modern identity capabilities such as multifactor authentication conditional access and passwordless options improving protection and usability
Review solution designs and implementation plans from delivery teams ensuring adherence to architectural guardrails performance objectives and operational readiness
Provide deep technical guidance on token based authentication protocols including OAuth and OpenID Connect within Azure AD B2C and Entra ID configurations
Optimize identity platforms for reliability and cost by defining capacity models tenant strategies and environment segmentation in line with business growth projections
Collaborate with cybersecurity risk and compliance stakeholders to translate regulatory and policy requirements into practical identity control implementations
Create comprehensive architecture documentation including diagrams configuration guidelines and runbooks to support operations and knowledge sharing within the organization
Engage with business product owners to understand customer identity needs and translate them into technical roadmaps that prioritize security user experience and time to market
Coordinate migration strategies from legacy identity providers to Azure AD B2C and Entra ID minimizing disruption and ensuring data integrity for existing users
Define monitoring telemetry and incident response requirements for identity services enabling proactive detection of anomalies and rapid recovery from service issues
Mentor engineering teams on best practices for integrating with Azure AD B2C and Entra ID building internal capability and reducing reliance on external specialists

Qualifications

Require six to ten years of experience in designing and implementing enterprise scale identity and access management solutions with a focus on Azure AD B2C and Entra ID
Require strong practical knowledge of OAuth OpenID Connect and modern authentication concepts applied in real world cloud and hybrid environments
Require hands on experience integrating web and mobile applications with Azure AD B2C using custom policies user flows and secure token handling practices
Require experience configuring and tuning Entra ID capabilities such as conditional access multifactor authentication and identity protection features
Require proven background in working with cross functional teams including security operations and application development to deliver secure and resilient solutions
Nice to have experience in designing zero trust aligned architectures that leverage Microsoft cloud security capabilities and industry best practices
Nice to have experience with scripting or automation for identity configuration management using tools such as PowerShell and infrastructure as code approaches
Nice to have exposure to customer facing or stakeholder facing roles that involve gathering requirements communicating architectural decisions and supporting adoption outcomes

Certifications Required

Preferred certifications include Microsoft Cybersecurity Architect Expert or Microsoft Identity and Access Administrator Associate

Prinicipal Atchtect