Senior IAM Engineer / Architect

Job Title: Senior IAM Engineer / Architect

Location: Canton, MA
Job Type: Contract (Remote)

Job description:

We are looking for a Senior IAM Engineer / Architect with strong hands-on experience in Microsoft Entra ID and Azure AD B2C+Entra External ID.

The ideal candidate should have:

1. Strong hands-on experience with Microsoft Entra ID, Azure AD B2C and Entra External ID.

2. Expert-level knowledge of OAuth 2.0, OIDC, SAML 2.0, JWT, access tokens, ID tokens and OAuth grant types.

3. Hands-on experience with Entra App Registrations, Enterprise Applications, Service Principals, API permissions and admin consent.

4. Strong implementation experience with Azure AD B2C Custom Policies, including Technical Profiles, Claims, Claims Transformations and Orchestration Steps.

5. Experience designing customer and employee authentication journeys, including MFA and Conditional Access.

6. Hands-on experience integrating REST APIs with Azure AD B2C Custom Policies.

7. Strong experience implementing and troubleshooting Azure Application Proxy and Application Proxy Connectors.

8. Experience with HTTP Header-based SSO and legacy application onboarding/migration.

9. Strong troubleshooting skills across authentication, federation, tokens, claims, SAML assertions and OAuth/OIDC flows.

10. Hands-on experience with Application Insights, KQL and Workbooks for analysing and debugging B2C authentication flows.

11. Experience troubleshooting Conditional Access, MFA, consent, token validation and application authentication issues.

12. Strong understanding of authentication vs authorization, delegated permissions, application permissions, scopes and application roles.

13. Experience supporting enterprise IAM applications in production environments, including incident and root-cause analysis.

14. Working knowledge of .NET/C#, ASP.NET Core, MSAL and Microsoft Graph API is preferred. And having automation experience in PowerShell or Python will be added advantages.

15. Candidates should have strong enterprise IAM architecture, implementation and production troubleshooting experience rather than portal administration-only experience.

16. 12+ years of IAM experience preferred, with significant hands-on experience in Entra ID and Azure AD B2C for senior/architect-level positions.