Azure AD B2C / Microsoft Entra External ID Systems Engineer

Intone Inc; United States; Remote; USD 110,000 - 150,000; Full time

Job summary

Intone Inc is seeking a Systems Engineer for a 6-month contract to maintain and support a production Microsoft Azure AD B2C customer identity platform. The role is fully remote in the United States and may extend based on performance and the planned migration to Microsoft Entra External ID.

You will troubleshoot authentication, manage user flows, policies, and registrations, and maintain integrations with loyalty, ecommerce, and customer databases.

Qualifications

• Direct hands-on experience supporting or developing within Microsoft Azure AD B2C.
• Experience with customer identity and access management (CIAM) platforms.
• Strong knowledge of identity management within a Microsoft Azure environment.
• Experience configuring authentication policies, user flows, custom policies, registration processes, and login workflows.
• Strong understanding of OAuth 2.0, OpenID Connect, tokens, claims, and modern authentication protocols.
• Experience developing, supporting, or troubleshooting APIs and enterprise application integrations.
• Ability to support customer-facing authentication and registration platforms.
• Strong systems engineering, troubleshooting, and root-cause analysis skills.
• Ability to work independently within a specialized and business-critical technical environment.

Responsibilities

• Maintain and support the existing Microsoft Azure AD B2C environment in production.
• Troubleshoot customer registration, login, authentication, identity, and access issues.
• Create and update authentication rules, user flows, policies, and custom identity functionality.
• Support the customer-facing loyalty registration and ecommerce login experience.
• Maintain integrations between Azure AD B2C, customer databases, loyalty platforms, ecommerce applications, and other enterprise systems.
• Support the planned transition of customer identity integrations from Salesforce to ECRS.
• Develop, configure, and troubleshoot APIs and integration dependencies related to customer identity data.
• Implement new authentication rules, integrations, and platform functionality as business requirements evolve.
• Identify opportunities to improve platform reliability, supportability, security, and operating costs.
• Assess the existing Azure AD B2C environment and recommend a future-state customer identity strategy.
• Help plan and potentially deliver a migration from Azure AD B2C to Microsoft Entra External ID.
• Evaluate migration requirements, risks, dependencies, custom policies, data flows, and integration impacts.
• Coordinate with ecommerce, loyalty, security, application, and business teams throughout maintenance and migration activities.
• Provide documentation and knowledge transfer to support internal ownership of the platform.

Skills

Azure AD B2C

CIAM platforms

OAuth 2.0 / OIDC

APIs & Integrations

Independent worker

Troubleshooting

Identity management

Job description

This is a 6-month contract role for a Systems Engineer to maintain and support a production Microsoft Azure AD B2C customer identity platform, with potential to extend based on performance and involvement in a planned migration to Microsoft Entra External ID. The position is fully remote and based in the United States.

Responsibilities

• Maintain and support the existing Microsoft Azure AD B2C environment in production.
• Troubleshoot customer registration, login, authentication, identity, and access issues.
• Create and update authentication rules, user flows, policies, and custom identity functionality.
• Support the customer-facing loyalty registration and ecommerce login experience.
• Maintain integrations between Azure AD B2C, customer databases, loyalty platforms, ecommerce applications, and other enterprise systems.
• Support the planned transition of customer identity integrations from Salesforce to ECRS.
• Develop, configure, and troubleshoot APIs and integration dependencies related to customer identity data.
• Implement new authentication rules, integrations, and platform functionality as business requirements evolve.
• Identify opportunities to improve platform reliability, supportability, security, and operating costs.
• Assess the existing Azure AD B2C environment and recommend a future-state customer identity strategy.
• Help plan and potentially deliver a migration from Azure AD B2C to Microsoft Entra External ID.
• Evaluate migration requirements, risks, dependencies, custom policies, data flows, and integration impacts.
• Coordinate with ecommerce, loyalty, security, application, and business teams throughout maintenance and migration activities.
• Provide documentation and knowledge transfer to support internal ownership of the platform.

Qualifications

• Required
  • Direct, hands-on experience supporting or developing within Microsoft Azure AD B2C.
  • Experience with customer identity and access management (CIAM) platforms.
  • Strong knowledge of identity management within a Microsoft Azure environment.
  • Experience configuring authentication policies, user flows, custom policies, registration processes, and login workflows.
  • Strong understanding of OAuth 2.0, OpenID Connect, tokens, claims, and modern authentication protocols.
  • Experience developing, supporting, or troubleshooting APIs and enterprise application integrations.
  • Ability to support customer-facing authentication and registration platforms.
  • Strong systems engineering, troubleshooting, and root-cause analysis skills.
  • Ability to work independently within a specialized and business-critical technical environment.
• Preferred
  • Experience with Microsoft Entra External ID.
  • Experience assessing or migrating Azure AD B2C environments to Microsoft Entra External ID.
  • Experience with ecommerce, retail, loyalty, customer applications, or digital commerce platforms.
  • Experience integrating identity platforms with Salesforce, ECRS, customer databases, or loyalty systems.
  • Development or scripting experience supporting identity rules and integrations.
  • Familiarity with alternative CIAM platforms such as Okta, Ping Identity, Keycloak, or JumpCloud.
  • Experience transitioning identity platform knowledge from a consulting vendor to an internal or staff-augmentation resource.
  • Experience documenting complex identity environments and providing technical knowledge transfer.