Hiring || Azure AD B2C Security Specialist - PAN INDIA

Summary

Responsibilities

• Design, develop, and maintain custom Azure AD B2C policies using TrustFrameworkBase, TrustFrameworkExtensions, and RelyingParty policies with XML-based configuration.
  
• Implement complex user journeys including SignUp, SignIn, Profile Editing, and Multi-Factor Authentication (MFA) with conditional logic and orchestration steps.
  
• Engineer custom claims and JWT tokens, ensuring proper claim mapping, transformation, and handling of edge cases such as null/empty values and type mismatches.
  
• Customize B2C user interfaces using HTML, CSS, JavaScript, and C# to deliver dynamic, responsive, and secure experiences tailored to business needs.
  
• Develop and integrate secure REST APIs and Function Apps for claims enrichment, validation, and external identity validation.
  
• Implement and enforce security controls to prevent bot attacks, rate-limit abuse, and mitigate MFA exhaustion scenarios using real-time monitoring and response.
  
• Configure and troubleshoot Azure AD B2B collaboration and external identity provider (IdP) integrations using SAML and OIDC protocols.
  
• Manage SAML metadata, NameID formats, EntityID configurations, and end-to-end token validation and debugging.
  
• Administer Azure AD/Entra ID tenants, including app registrations, service principals, API permissions, consent flows, and token configuration.
  
• Lead CI/CD pipelines using Azure DevOps for policy deployment, versioning, rollback, and artifact management across environments.
  
• Own identity solutions from concept to production, including troubleshooting, performance optimization, and delivery under tight deadlines.
  

• 10-15 years of total IT experience with 6+ years focused on Azure AD B2C, Identity Experience Framework (IEF), and custom policy development.
  
• Proficient in XML coding for B2C custom policies, including technical profiles (Self-Asserted, REST, AAD), claims transformations, and orchestration steps.
  
• Strong hands-on experience with JWT token customization, claims engineering, and troubleshooting missing or malformed claims.
  
• Expertise in UI customization using HTML, CSS, JavaScript, and C# to override default B2C screens and implement dynamic behavior.
  
• Solid coding skills in C#/.NET or Python (minimum one required) for building secure REST APIs and Function Apps used in identity flows.
  
• Demonstrated experience in securing identity flows, preventing abuse, implementing rate limiting, and protecting against direct endpoint attacks.
  
• Proven ability to design and deploy secure identity architectures using WAF, Azure Front Door, and other protective measures.
  
• In-depth knowledge of SAML and OIDC protocols, including metadata configuration, NameID handling, EntityID setup, and token validation.
  
• Extensive experience with Azure AD/Entra ID tenant management, including app registrations, API permissions, consent models, and token configuration.
  
• Skilled in Azure DevOps pipelines, Git repository management, artifact handling, and deployment automation across multiple environments.
  
• Ability to independently own identity solutions end-to-end—design, implement, integrate, debug, secure, and deliver under pressure.