Senior IAM Engineer/Architect

We are looking for a Senior IAM Engineer / Architect with strong hands-on experience in Microsoft Entra ID and Azure AD B2C+Entra External ID. The ideal candidate should have:

• Strong hands-on experience with Microsoft Entra ID, Azure AD B2C and Entra External ID.
• Expert-level knowledge of OAuth 2.0, OIDC, SAML 2.0, JWT, access tokens, ID tokens and OAuth grant types.
• Hands-on experience with Entra App Registrations, Enterprise Applications, Service Principals, API permissions and admin consent.
• Strong implementation experience with Azure AD B2C Custom Policies, including Technical Profiles, Claims, Claims Transformations and Orchestration Steps.
• Experience designing customer and employee authentication journeys, including MFA and Conditional Access.
• Hands-on experience integrating REST APIs with Azure AD B2C Custom Policies.
• Strong experience implementing and troubleshooting Azure Application Proxy and Application Proxy Connectors.
• Experience with HTTP Header-based SSO and legacy application onboarding/migration.
• Strong troubleshooting skills across authentication, federation, tokens, claims, SAML assertions and OAuth/OIDC flows.
• Hands-on experience with Application Insights, KQL and Workbooks for analysing and debugging B2C authentication flows.
• Experience troubleshooting Conditional Access, MFA, consent, token validation and application authentication issues.
• Strong understanding of authentication vs authorization, delegated permissions, application permissions, scopes and application roles.
• Experience supporting enterprise IAM applications in production environments, including incident and root-cause analysis.
• Working knowledge of .NET/C#, ASP.NET Core, MSAL and Microsoft Graph API is preferred. And having automation experience in PowerShell or Python will be added advantages.
• Candidates should have strong enterprise IAM architecture, implementation and production troubleshooting experience rather than portal administration-only experience.
• 12+ years of IAM experience preferred, with significant hands-on experience in Entra ID and Azure AD B2C for senior/architect-level positions.