Senior IAM Engineer/Architect

Title: Senior IAM Engineer/Architect

Location: Halifax, CA (Remote)

Type: Contract

Description:

• Strong hands-on experience with Microsoft Entra ID, Azure AD B2C and Entra External ID.
• Expert-level knowledge of OAuth 2.0, OIDC, SAML 2.0, JWT, access tokens, ID tokens and OAuth grant types.
• Hands-on experience with Entra App Registrations, Enterprise Applications, Service Principals, API permissions and admin consent.
• Strong implementation experience with Azure AD B2C Custom Policies, including Technical Profiles, Claims, Claims Transformations and Orchestration Steps.
• Experience designing customer and employee authentication journeys, including MFA and Conditional Access.
• Hands-on experience integrating REST APIs with Azure AD B2C Custom Policies.
• Strong experience implementing and troubleshooting Azure Application Proxy and Application Proxy Connectors.
• Experience with Header-based SSO and legacy application onboarding/migration.
• Strong troubleshooting skills across authentication, federation, tokens, claims, SAML assertions and OAuth/OIDC flows.
• Hands-on experience with Application Insights, KQL and Workbooks for analysing and debugging B2C authentication flows.
• Experience troubleshooting Conditional Access, MFA, consent, token validation and application authentication issues.
• Strong understanding of authentication vs authorization, delegated permissions, application permissions, scopes and application roles.
• Experience supporting enterprise IAM applications in production environments, including incident and root-cause analysis.
• Working knowledge of .NET/C#, ASP.NET Core, MSAL and Microsoft Graph API is preferred. And having automation experience in PowerShell or Python will be added advantages.
• Candidates should have strong enterprise IAM architecture, implementation and production troubleshooting experience rather than portal administration-only experience.
• 12+ years of IAM experience preferred, with significant hands-on experience in Entra ID and Azure AD B2C for senior/architect-level positions.

Day-to-Day Job Duties

• Design, implement, and manage identity and access management (IAM) solutions using Microsoft Entra ID and Azure AD B2C.
• Configure and maintain authentication and authorization protocols including OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0.
• Develop and manage access control mechanisms, including access tokens, API permissions, and OAuth grant types.
• Implement and manage Azure Application Proxy connectors and header-based Single Sign-On (SSO) solutions.
• Onboard enterprise applications into Azure AD and configure secure authentication and authorization flows.
• Design and enforce Conditional Access policies aligned with security and compliance standards.
• Troubleshoot authentication, token, and federation-related issues across enterprise and customer-facing applications.
• Develop and maintain Azure AD B2C custom policies, including claims transformations and user journey orchestration.
• Implement Multi-Factor Authentication (MFA) for customer-facing applications.
• Integrate external systems using REST APIs within Azure AD B2C frameworks.
• Monitor and diagnose authentication flows using Application Insights, Kusto Query Language (KQL), and workbooks.
• Debug and optimize B2C authentication flows to improve performance and reliability.
• Collaborate with application teams, security teams, and stakeholders to ensure secure IAM implementations.
• Provide production support, including incident management, root cause analysis, and issue resolution.

Basic Qualifications:

• (Required skills with minimum years of experience)
• 5+ years of experience in Identity and Access Management (IAM) engineering or architecture.
• 5+ years of hands-on experience with Microsoft Entra ID (Azure AD) and Azure AD B2C.
• Strong expertise in authentication and authorization protocols:
• OAuth 2.0 (3+ years)
• OpenID Connect (OIDC) (3+ years)
• SAML 2.0 (3+ years)
• 3+ years of experience working with access tokens, API permissions, and OAuth grant types.

Proven experience with:

• Azure AD enterprise application onboarding (2+ years)
• Conditional Access policy design and implementation (2+ years)
• Azure Application Proxy and SSO configurations (2+ years)
• 3+ years of hands-on troubleshooting experience in authentication, token, and federation issues.
• Strong experience with Azure AD B2C:
• Custom policies and user journeys (3+ years)
• Claims transformations and REST API integrations (2+ years)
• Experience with monitoring and diagnostics tools:
• Application Insights (2+ years)
• KQL and Azure Workbooks (2+ years)
• Solid understanding of MFA implementation and identity security best practices.
• Nice to Have
• Programming experience in .NET / C#.
• Experience providing production support in IAM environments.
• Familiarity with CI/CD pipelines and DevOps practices for IAM deployments.
• Experience with identity governance, risk-based authentication, or zero trust frameworks.
• Certifications such as:
• Microsoft Certified: Identity and Access Administrator Associate
• Microsoft Certified: Azure Solutions Architect Expert