Microsoft Entra External Identity / B2B Specialist

Smart IT Frame LLC; Houston (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

Smart IT Frame LLC in Houston, TX seeks a Microsoft Entra External Identity / B2B Specialist to design and implement secure external-user identities, partner access and governance. You will deploy Entra ID, Entra External ID, Conditional Access, Entitlement Management, and federation patterns.

Responsibilities include configuring cross-tenant access, onboarding processes, reviews, and integrating Entra-based identity with enterprise apps.

Qualifications

• Hands-on experience with Microsoft Entra ID and Entra External Identities.
• Configuring Conditional Access, MFA and risk-based access.
• Experience with Entitlement Management, Access Packages and access reviews.
• Proficient in external identity federation using SAML, OAuth, OIDC.

Responsibilities

• Design and implement Entra External ID / Entra B2B solutions for external users.
• Configure and manage Conditional Access policies and MFA.
• Implement entitlement management and access reviews.
• Support cross-tenant access and external collaboration.
• Develop documentation and diagrams for external identity solutions.
• Troubleshoot authentication, federation, and external-user access issues.

Skills

Microsoft Entra ID

Entra External Identities

Conditional Access

MFA

Entitlement Management

Access Reviews

Identity Federation

SAML

OAuth 2.0

OIDC

Cross-Tenant Access

Lifecycle Management

Azure AD

Tools

Azure Active Directory

Job description

Microsoft Entra External Identity / B2B Specialist

Location: Houston, TX

Job Description

We are seeking an experienced Microsoft Entra External Identity / B2B Specialist with strong expertise in designing and implementing secure identity solutions for external users, partners, vendors, and other business-to-business scenarios. The ideal candidate will have hands-on experience with Microsoft Entra ID, Entra External ID, Conditional Access, Entitlement Management, identity federation, and secure external-user onboarding.

Key Responsibilities

• Design, implement, and manage Microsoft Entra External ID / Entra B2B solutions for external users and partner organizations.
• Develop secure authentication and authorization patterns for external identities.
• Configure and manage Microsoft Entra Conditional Access policies, MFA, risk-based access, and authentication controls.
• Implement Entitlement Management, Access Packages, approval workflows, and periodic access reviews.
• Design and maintain external identity federation using SAML, OAuth, OIDC, and other identity federation protocols.
• Configure cross-tenant access and secure collaboration between internal and external organizations.
• Establish secure onboarding, provisioning, and lifecycle-management processes for B2B users.
• Implement governance controls to ensure external users receive only the access required for their business needs.
• Troubleshoot authentication, authorization, federation, and external-user access issues.
• Collaborate with security, infrastructure, application, and IAM teams to integrate Entra-based identity solutions with enterprise applications.
• Develop documentation, architecture diagrams, standards, and operational procedures for external identity solutions.
• Identify opportunities to automate external-user onboarding, access provisioning, reviews, and deprovisioning.

Required Skills

• Strong hands-on experience with Microsoft Entra ID / Azure Active Directory.
• Strong experience with Entra B2B / External Identities.
• Expertise in Conditional Access and MFA.
• Hands-on experience with Entitlement Management and Access Packages.
• Experience with Access Reviews and Microsoft Entra Identity Governance.
• Strong understanding of identity federation and protocols such as SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with Cross-Tenant Access Settings and external collaboration.
• Understanding of identity lifecycle management, provisioning, authentication, and authorization.
• Strong troubleshooting and security architecture skills.