External Identity Architect

CPS Group; City Of London; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

A technology consulting company in London is seeking an experienced External Identity Architect specializing in Microsoft Entra External ID to design scalable identity solutions. Ideal candidates will have strong full-stack development skills and experience in authentication and authorization integration across web and mobile apps. This hybrid role emphasizes collaboration and best practices in identity management, offering an innovative working environment.

Qualifications

• Extensive experience with Microsoft Entra External ID / Azure AD B2C.
• Strong full-stack development skills (front-end + back-end integration).
• Proven track record designing and implementing external identity solutions for enterprise applications.
• Knowledge of OAuth2, OpenID Connect, SAML, and other modern authentication protocols.
• Experience with API security, custom policies, and advanced user journey configuration.
• Excellent problem-solving, communication, and stakeholder management skills.

Responsibilities

• Design, implement, and maintain Entra External ID solutions for applications.
• Collaborate with teams to integrate authentication and authorization flows.
• Develop custom policies, user journeys, and secure identity workflows tailored to business requirements.
• Provide guidance on best practices for identity management.
• Lead architecture reviews for scalability and compliance.
• Mentor teams on identity strategy and integration.

Skills

Microsoft Entra External ID / Azure AD B2C

Full-stack development

OAuth2

OpenID Connect

SAML

API security

Custom policies

Advanced user journey configuration

Problem-solving

Communication

Stakeholder management

Job description

External Identity Architect

Professional Services - London, Greater London (Hybrid)

About Kocho

Kocho recognise that technology on its own does not deliver change and offers technology adoption services alongside excellent technical consulting to enable our clients to achieve their business goals on their journey to Become Greater.

Our head office is in the heart of London’s West End and provides a comfortable working environment with flexible collaboration spaces that encourage our people to Become Greater with the aim to Do What’s Right. In 2022 we opened new offices in Cardiff and Cape Town which follow the style of our London space. Kocho is an equal opportunities employer. We make recruitment decisions based on qualifications, skill set and experiences. We consider all suitable candidates regardless of their age, sex, gender reassignment, race, religious beliefs, or lack thereof, marital status, disability or sexual orientation or any other protected characteristic. This mindset aligns with our company values as we understand that we are Better Together.

Job Purpose

We are seeking a highly skilled External Identity Architect specializing in Microsoft Entra External ID to design and implement scalable identity solutions for external users. The ideal candidate will have hands-on experience with B2C identity scenarios and full-stack development, enabling seamless integration of identity and access management across web and mobile applications.

Key Responsibilities

• Design, implement, and maintain Entra External ID (Azure AD B2C) solutions for external-facing applications.
• Collaborate with development teams to integrate authentication and authorization flows across full-stack applications.
• Develop custom policies, user journeys, and secure identity workflows tailored to business requirements.
• Provide guidance on best practices for identity management, authentication, and authorization.
• Lead architecture reviews, ensuring scalability, security, and compliance with industry standards.
• Mentor and support teams on identity strategy, integration, and troubleshooting complex scenarios.

Qualifications & Skills

• Extensive experience with Microsoft Entra External ID / Azure AD B2C.
• Strong full-stack development skills (front-end + back-end integration).
• Proven track record designing and implementing external identity solutions for enterprise applications.
• Knowledge of OAuth2, OpenID Connect, SAML, and other modern authentication protocols.
• Experience with API security, custom policies, and advanced user journey configuration.
• Excellent problem-solving, communication, and stakeholder management skills.

Desirable

• Prior experience in large-scale consumer or partner identity deployments.
• Familiarity with CI/CD pipelines, DevOps practices, and cloud-native architecture.
• Security certifications (e.g., Microsoft Certified: Identity and Access Administrator Associate).