Job Title: Azure AD B2C Lead

Location: Hyderabad

Role Overview

We are seeking a senior Azure AD B2C / Microsoft Entra External ID Lead to take ownership of customer identity architecture, implementation, modernization, automation, and platform operations. The ideal candidate should combine deep hands-on B2C expertise, strong Azure architecture knowledge, security awareness, and technical leadership, while partnering closely with application, API, cloud, security, and platform teams.

Key Responsibilities

- Own the end-to-end architecture, implementation, modernization, and operations of Azure AD B2C / Microsoft Entra External ID platforms.
- Design scalable CIAM solutions supporting web, mobile, e-commerce, CRM, APIs, microservices, customer support, and connected-device ecosystems.
- Define target-state architecture, reusable patterns, engineering standards, tenant/environment strategy, configuration management, and release governance.
- Design and implement B2C custom policies, IEF, user journeys, technical profiles, claims transformations, REST integrations, identity providers, and orchestration flows.
- Build secure customer journeys covering registration, sign-in, MFA, password reset, profile management, account recovery, account linking, federation, duplicate-account handling, and identity migration.
- Apply solid knowledge of OAuth 2.0, OIDC, SAML, JWT, SSO, MFA, RBAC, ABAC, token/session management, API authorization, and service-to-service authentication.
- Integrate B2C with web/mobile applications, APIs, microservices, API gateways, CRM, CDP, marketing, loyalty, commerce, support, and connected-product platforms.
- Guide application teams on identity SDKs, authentication middleware, app registrations, scopes, API permissions, secure token handling, and delegated/application authorization.
- Automate identity configuration, custom policy deployment, app registrations, secret rotation, environment promotion, testing, validation, rollback, and releases using CI/CD and Infrastructure as Code.
- Provide broader Azure architecture guidance across networking,



compute, storage, integration, monitoring, security, scalability, availability, resilience, performance, and modernization.
- Work with Azure Key Vault, Azure Monitor, Application Insights, Azure DevOps, API Management, Azure Functions, Microsoft Graph, and related Azure services.
- Establish identity observability and monitoring for authentication failures, token/policy issues, suspicious activity, and identity-provider failures, integrating with monitoring and SIEM platforms.
- Drive automated diagnostics, remediation, dashboards, alerting, RCA, incident response, runbooks, support processes, and operational readiness.
- Implement Zero Trust, least privilege, PIM, secrets and certificate management, encryption, audit logging, privacy, PII protection, and secure credential lifecycle management.
- Partner with cybersecurity, privacy, legal, and compliance teams to address GDPR, CCPA, regulatory, privacy, and enterprise security requirements.
- Apply FinOps principles to improve cost visibility, optimization, governance, and overall cost efficiency without compromising security, scalability, performance, or reliability.
- Lead architecture reviews, technical decisions, escalations, mentoring, documentation, roadmap planning, modernization, migrations, feature adoption, scalability, and platform maturity initiatives.
- Collaborate with product, engineering, mobile, e-commerce, cloud, platform, infrastructure, security, privacy, and support teams.

Required Technical Skills:
- Deep hands-on experience with Azure AD B2C / Microsoft Entra External ID, including:

- Custom Policies / IEF

- Claims and Claims Transformations

- Technical Profiles





- User Journeys

- REST API integrations

- Identity Providers

- Orchestration Steps
- Strong Customer IAM / CIAM / IAM experience covering authentication, authorization, federation, identity lifecycle, customer profiles, consent, and customer experience.
- Strong Azure architecture and hands-on experience with Azure services and platform dependencies.
- Experience integrating identity platforms with web, mobile, APIs, microservices, and cloud-native applications.
- Strong knowledge of CI/CD, Infrastructure as Code, automation, REST APIs, Azure DevOps, and identity configuration management.
- Strong understanding of identity security, tokens, secrets, encryption, logging, auditing, Zero Trust, and cloud security.
- Ability to combine architecture ownership, hands-on engineering, production troubleshooting, and technical leadership.

Preferred Skills
- Experience with Microsoft Entra ID, Conditional Access, PIM, and Entra ID Governance.
- Multi-cloud and FinOps experience across Azure, AWS, or other cloud platforms.
- IAM/CIAM migration experience from Okta, Auth0, Ping, ForgeRock, legacy IAM, or custom identity platforms.
- Experience supporting high-volume consumer, e-commerce, mobile, connected-device, or digital platforms.
- Experience integrating with CRM/CDP, marketing, loyalty, commerce, API gateways, microservices, and service-to-service authentication.
- Knowledge of Terraform, Bicep, ARM, PowerShell, Python, GitHub Actions, or similar automation technologies.
- Understanding of GDPR, CCPA, consent management, SIEM/SOC, and enterprise incident management.

Ideal Candidate: The ideal candidate is a senior Azure AD B2C / Customer Identity technical leader who can take ownership of the platform while remaining hands-on. They should be capable of defining architecture and engineering standards, driving modernization and automation, troubleshooting complex production issues, and providing technical direction across engineering and business teams.

📌 Azure ADC Lead (Hyderabad)
🏢 ConglomerateIT Services
📍 Hyderabad