Role: AZURE AD B2C LEAD
Location: Hyderabad, India

This is a technical leadership role focused on Azure AD B2C / Microsoft Entra External ID, customer identity architecture, hands-on delivery, platform modernization, and cross-functional technical direction. The Lead is expected to establish standards and target-state architecture while remaining sufficiently hands-on to implement, troubleshoot, and drive critical identity initiatives.

What We Need This Lead To Own

- Lead the end-to-end architecture, implementation, modernization, and operational maturity of Boses customer identity platform using Azure AD B2C / Microsoft Entra External ID.
- Serve as the primary technical lead and subject matter expert for Azure customer identity, with strong working knowledge of the broader Azure environment, services, architecture patterns, dependencies, and platform capabilities.
- Design secure, scalable, and seamless authentication and authorization experiences across Bose customer-facing digital platforms, including web, mobile, e-commerce, support, and connected-product ecosystems.
- Provide technical leadership across identity architecture and broader Azure platform decisions, connecting customer identity requirements to cloud, application, API, security, and platform engineering needs.
- Define target-state identity architecture, reusable enterprise patterns, engineering standards, and implementation guidance.
- Remain hands-on with custom policies, integrations, automation, troubleshooting, architecture validation, and critical delivery work.
- Lead technical decisions, architecture reviews, design discussions, and resolution of complex identity and Azure platform issues.
- Apply FinOps principles and practical cloud-security judgment to architecture and implementation decisions.

Core Technical Responsibilities

1. Azure AD B2C / Microsoft Entra External ID Leadership & Architecture

- Architect and implement Azure AD B2C / Microsoft Entra External ID tenant configurations for customer-facing applications.
- Own user journeys, custom policies, built-in user flows, identity providers, claims providers, and orchestration steps.
- Build secure authentication experiences for sign-up, sign-in, account linking, password reset, profile updates, and account recovery.
- Configure and optimize social identity provider integrations and other required external identity providers.
- Design scalable identity patterns supporting multiple applications, brands, regions, and customer segments.
- Establish tenant strategy, environment separation, configuration management, release governance, and reusable implementation standards across development, test, staging, and production.
- Lead technical reviews and provide direction to engineers implementing customer identity capabilities.

2. Azure Architecture & Cloud Platform

- Provide architectural leadership beyond B2C, demonstrating strong understanding of Azure services, resources, networking, compute, storage, integration, monitoring, security, and platform dependencies.
- Evaluate architecture choices across the Azure environment and ensure identity services integrate effectively with broader cloud platforms and enterprise applications.
- Guide scalability, availability, resiliency, performance, operational readiness, and platform modernization decisions.
- Translate business and application requirements into secure, scalable, maintainable Azure architecture patterns.
- Collaborate with cloud engineering, platform, application, security, and infrastructure teams on cross-platform architecture decisions.

3. Authentication, Authorization, IAM & Customer Identity Experience

- Lead modern authentication patterns including MFA, adaptive authentication, passwordless authentication, biometric authentication support, and risk-based access controls where applicable.
- Define secure session management, token lifecycle, refresh-token handling, logout behavior, and single sign-on patterns.
- Implement and govern OAuth 2.0, OpenID Connect, SAML, JWT, federation, SSO, MFA, and API authorization standards.
- Apply IAM principles to customer and application identity use cases, including authentication, authorization, federation, identity lifecycle, and access controls.
- Architect role-based and attribute-based authorization models for customer, partner, support, and administrative access scenarios.
- Lead customer account linking, identity federation, duplicate-account handling, and account migration strategies.

4. Application, API & Digital Platform Integration

- Lead integration of Azure AD B2C / Entra External ID with web applications, mobile applications, APIs, microservices, e-commerce platforms, CRM platforms, and customer-support systems.
- Design secure API access patterns using scopes, app registrations, API permissions, token validation, and delegated/application authorization models.
- Guide application engineering teams on identity SDKs, authentication middleware,



authorization controls, and secure token handling.
- Support integrations with customer profile platforms, marketing platforms, loyalty systems, commerce systems, and connected-device ecosystems.
- Define API gateway and backend-service authentication patterns for customer-facing and machine-to-machine interactions.
- Ensure identity architecture supports scalable digital experiences across global markets and high-volume customer traffic.

5. Custom Policy Engineering & Identity Automation

- Develop and maintain Azure AD B2C custom policies using Identity Experience Framework (IEF).
- Build reusable policy components, claims transformations, technical profiles, REST API integrations, and orchestration patterns.
- Integrate custom policies with external REST APIs for customer validation, entitlement checks, fraud controls, profile enrichment, consent validation, and account lifecycle workflows.
- Automate tenant configuration, policy deployment, application registrations, secret rotation, and environment promotion using Infrastructure as Code and CI/CD pipelines.
- Build version-controlled deployment patterns for B2C policies, configuration artifacts, and application integration settings.
- Establish automated testing, validation, rollback, and release controls for identity configuration changes.

6. FinOps & Cloud Cost Management

- Apply FinOps principles to cloud architecture, resource utilization, cost visibility, optimization, governance, and accountability.
- Evaluate architecture and resource decisions for cost efficiency without compromising security, performance, scalability, or reliability.
- Partner with cloud/platform teams to identify optimization opportunities, establish cost controls, and improve ongoing cloud financial governance.

7. Security, Privacy & Compliance

- Apply strong practical cloud-security knowledge to Azure and identity architecture; deep cybersecurity specialization is not required.
- Design identity controls aligned with enterprise security, privacy, and compliance requirements.
- Implement secure handling of customer PII, consent records, preferences, authentication data, and profile attributes.
- Apply least-privilege access, privileged-access controls, certificate management, secret management, and secure credential lifecycle practices.
- Partner with cybersecurity, privacy, legal, and compliance teams to ensure customer identity architecture supports applicable regulatory obligations.
- Define audit logging, monitoring, anomaly detection, and investigation capabilities for authentication events and identity-related security incidents.
- Ensure identity design aligns with Zero Trust principles, secure-by-design practices, and Bose enterprise security standards.

8. Monitoring, Observability & Operational Readiness

- Implement monitoring and observability for authentication success/failure rates, policy errors, token issues, suspicious login activity, and external identity provider failures.
- Integrate identity telemetry with enterprise monitoring and logging platforms such as New Relic, LogicMonitor, Azure Monitor, Application Insights, and SIEM platforms.
- Define operational dashboards, alert thresholds, service health monitoring, and incident-response procedures for customer identity services.
- Build automated diagnostics and remediation workflows for recurring authentication, policy, and integration failures.
- Drive reduction of customer-impacting identity incidents through proactive monitoring, root-cause analysis, and resilient architecture patterns.
- Establish runbooks, support procedures, escalation paths, and operational documentation for identity platform support teams.

9. Technical Leadership, Governance & Stakeholder Management

- Define enterprise standards for customer identity architecture, authentication patterns, authorization models, application onboarding, custom-policy development, and release practices.
- Lead architecture reviews for recent customer-facing applications and integrations requiring Azure AD B2C / Entra External ID.
- Act as the technical escalation point for complex identity architecture, implementation, integration, and production issues.
- Partner with product, engineering, security, privacy, e-commerce, mobile, cloud, and support teams to translate business requirements into secure identity and Azure solutions.
- Provide technical guidance, design reviews, mentoring, and troubleshooting support to developers, platform engineers, and support teams.
- Document architecture decisions, integration patterns, custom-policy standards,



security controls, FinOps considerations, and operational procedures.
- Drive roadmap planning for modernization, feature adoption, migration, scalability, cost optimization, and long-term platform maturity.

Required Technical Background

- Hands-on experience in Identity and Access Management, authentication, authorization, customer identity, Azure architecture, or closely related architecture/leadership roles.
- Deep hands-on experience with Azure AD B2C / Microsoft Entra External ID, including claims transformations, technical profiles, REST API integrations, custom user journeys, and identity-provider integrations.
- Strong understanding of customer identity, customer profile management, consent, account lifecycle, and customer authentication experience design.
- Experience integrating identity platforms with web applications, mobile applications, APIs, microservices, and cloud-native platforms.
- Proficiency with Azure services such as Azure Key Vault, Azure Monitor, Application Insights, Azure DevOps, API Management, Functions, and Microsoft Graph.
- Experience implementing CI/CD pipelines and Infrastructure as Code for identity configurations and application integrations.
- Strong knowledge of identity security, token security, secrets management, encryption, logging, auditing, and Zero Trust principles.
- Demonstrated ability to lead technical discussions, influence engineering decisions, and communicate effectively with technical teams, product stakeholders, security teams, cloud/platform teams, and senior leadership.
- Ability to balance architecture ownership with hands-on implementation and production troubleshooting.

Preferred Qualifications

- Multi-cloud experience across Azure, AWS, or other major cloud platforms.
- Experience applying FinOps across more than one cloud platform.
- Experience with Microsoft Entra ID, Entra ID Governance, Conditional Access, Privileged Identity Management, or related IAM capabilities.
- Experience migrating customer identity platforms from legacy IAM, custom authentication systems, Okta, Auth0, Ping Identity, ForgeRock, or similar platforms.
- Experience with customer-facing e-commerce, mobile, connected-device, consumer-product, or high-volume digital platforms.
- Experience integrating with CRM, CDP, marketing automation, loyalty, commerce, or customer-support platforms.
- Experience with API gateways, microservices security, service-to-service authentication, and cloud-native authorization.
- Experience with Azure DevOps, GitHub Actions, Terraform, Bicep, ARM templates, PowerShell, Python, or REST API automation.
- Familiarity with privacy and compliance requirements affecting customer identity and PII, including GDPR, CCPA, and consent-management practices.
- Experience integrating identity telemetry with SIEM, SOC workflows, and enterprise incident-management processes.

Ideal Candidate Profile

- Senior Azure AD B2C / Customer Identity Lead with deep Microsoft Entra External ID capability and strong broader Azure architecture knowledge.
- A technical leader who can own the customer identity platform, set direction, establish standards, and make architecture decisions while remaining hands-on.
- Strong command of custom policies, Identity Experience Framework (IEF), claims, technical profiles, REST integrations, federation, authentication protocols, and application/API integration.
- An Azure subject matter expert who understands the wider Azure environment rather than focusing only on B2C.
- Able to lead modernization, migration, scalability, operational maturity, automation, and cost optimization initiatives.
- Has sound practical cloud-security judgment and incorporates security, privacy, and resilience into architecture decisions.
- Comfortable leading across digital product, mobile, e-commerce, cloud engineering, cybersecurity, privacy, and customer - support teams.
- Able to simplify complex identity and cloud requirements into scalable, secure, reusable, and cost-conscious technical solutions.
- Strong communicator who can influence technical and non-technical stakeholders, mentor engineers, and document complex architecture clearly.

Why This Role Matters

- Lead the evolution of Boses customer identity capability into a secure, seamless, scalable, and enterprise-grade platform.
- Establish standardized customer identity and Azure architecture patterns across web, mobile, APIs, and digital platforms.
- Provide technical leadership for identity modernization, integrations, automation, and operational readiness.
- Strengthen security, auditability, privacy controls, and protection of customer data.
- Improve cloud cost visibility and optimization through practical FinOps discipline.
- Reduce operational risk through automated deployment, monitoring, resilient architecture, and sound cloud-security practices.
- Enable future digital growth through a modern, reusable, enterprise-grade customer identity and Azure foundation.

📌 Azure ADC Lead (Hyderabad)
🏢 ConglomerateIT Services
📍 Hyderabad