IAM SME – Entra External ID (B2Cto Entra External ID Migration)

Role : IAM SME – Entra External ID (B2Cto Entra External ID Migration)

Location : Remote

Type : Contract

Required Skills & Experience

Required Skills & Experience
•    10+ years in Identity & Access Management with hands-on SSO and federation implementations.
•    Strong expertise in: 
     o    Microsoft Entra External ID
     o    OAuth2 / OIDC, SAML 2.0, JWT, token/session management
     o    Application registrations, redirect URIs, certificates/secrets, custom domains concepts
•    Experience with Azure AD B2C and migration patterns to Entra External ID.
•    Working knowledge of Microsoft Graph API for user migration and identity operations. 
•    Practical experience designing and implementing Conditional Access + MFA strategies. 
•    Strong documentation and stakeholder management skills; ability to run workshops and KT sessions. Nice-to-Have
•    Experience integrating SSO with mobile apps (browser-based handoff, deep links, sign-out redirection patterns). 
•    Familiarity with Identity Governance/RBAC best practices for least privilege access.
•    Experience hands on experience migrations at large scale.
•    Experience handling large external user populations with high availability and performance considerations.
•    Strong understanding of identity lifecycle management for external identities.
•    Ability to troubleshoot complex federation, token, and claims-related issues.
•    Familiarity with security logging, audit requirements, and identity-related incident response.

Preferred Certifications (nice to have)
•    Microsoft Certified: Identity and Access Administrator Associate
•    Microsoft Certified: Cybersecurity Architect Expert

Soft Skills:
•    Strong analytical, problem-solving, and troubleshooting skills.
•    Excellent communication and stakeholder management abilities.
•    Ability to work independently and collaboratively in a fast-paced environment.

Tekshapers is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.