Azure AD B2C Lead

Job Title: Azure AD B2C Lead

Location: Hyderabad

Role Overview:

We are seeking a senior Azure AD B2C / Microsoft Entra External ID Lead to take ownership of customer identity architecture, implementation, modernization, automation, and platform operations. The ideal candidate should combine deep hands-on B2C expertise, strong Azure architecture knowledge, security awareness, and technical leadership, while partnering closely with application, API, cloud, security, and platform teams.

Key Responsibilities:

• Own the end-to-end architecture, implementation, modernization, and operations of Azure AD B2C / Microsoft Entra External ID platforms.
• Design scalable CIAM solutions supporting web, mobile, e-commerce, CRM, APIs, microservices, customer support, and connected-device ecosystems.
• Define target-state architecture, reusable patterns, engineering standards, tenant/environment strategy, configuration management, and release governance.
• Design and implement B2C custom policies, IEF, user journeys, technical profiles, claims transformations, REST integrations, identity providers, and orchestration flows.
• Build secure customer journeys covering registration, sign-in, MFA, password reset, profile management, account recovery, account linking, federation, duplicate-account handling, and identity migration.
• Apply strong knowledge of OAuth 2.0, OIDC, SAML, JWT, SSO, MFA, RBAC, ABAC, token/session management, API authorization, and service-to-service authentication.
• Integrate B2C with web/mobile applications, APIs, microservices, API gateways, CRM, CDP, marketing, loyalty, commerce, support, and connected-product platforms.
• Guide application teams on identity SDKs, authentication middleware, app registrations, scopes, API permissions, secure token handling, and delegated/application authorization.
• Automate identity configuration, custom policy deployment, app registrations, secret rotation, environment promotion, testing, validation, rollback, and releases using CI/CD and Infrastructure as Code.
• Provide broader Azure architecture guidance across networking, compute, storage, integration, monitoring, security, scalability, availability, resilience, performance, and modernization.
• Work with Azure Key Vault, Azure Monitor, Application Insights, Azure DevOps, API Management, Azure Functions, Microsoft Graph, and related Azure services.
• Establish identity observability and monitoring for authentication failures, token/policy issues, suspicious activity, and identity-provider failures, integrating with monitoring and SIEM platforms.
• Drive automated diagnostics, remediation, dashboards, alerting, RCA, incident response, runbooks, support processes, and operational readiness.
• Implement Zero Trust, least privilege, PIM, secrets and certificate management, encryption, audit logging, privacy, PII protection, and secure credential lifecycle management.
• Partner with cybersecurity, privacy, legal, and compliance teams to address GDPR, CCPA, regulatory, privacy, and enterprise security requirements.
• Apply FinOps principles to improve cost visibility, optimization, governance, and overall cost efficiency without compromising security, scalability, performance, or reliability.
• Lead architecture reviews, technical decisions, escalations, mentoring, documentation, roadmap planning, modernization, migrations, feature adoption, scalability, and platform maturity initiatives.
• Collaborate with product, engineering, mobile, e-commerce, cloud, platform, infrastructure, security, privacy, and support teams.

Required Technical Skills:

• Deep hands-on experience with Azure AD B2C / Microsoft Entra External ID, including:

• Custom Policies / IEF
• Claims and Claims Transformations
• Technical Profiles
• User Journeys
• REST API integrations
• Identity Providers

• Orchestration Steps

• Strong Customer IAM / CIAM / IAM experience covering authentication, authorization, federation, identity lifecycle, customer profiles, consent, and customer experience.
• Strong Azure architecture and hands-on experience with Azure services and platform dependencies.
• Experience integrating identity platforms with web, mobile, APIs, microservices, and cloud-native applications.
• Strong knowledge of CI/CD, Infrastructure as Code, automation, REST APIs, Azure DevOps, and identity configuration management.
• Strong u…