Job Title: Azure AD B2C / Microsoft Entra External ID Systems Engineer
Job Type: Contract
Job Location: Remote
Overview
Seeking an Azure AD B2C / Microsoft Entra External ID Systems Engineer to support and evolve a customer identity platform running on Microsoft Azure AD B2C. The existing environment supports customer login, loyalty registration, authentication rules, and integrations across ecommerce, loyalty, and customer data systems.
The selected Systems Engineer would assume hands-on responsibility for maintaining and enhancing the current Azure AD B2C environment while helping evaluate, plan, and potentially execute a future migration to Microsoft Entra External ID.
This opportunity is intended to reduce reliance on the current high-cost vendor support model while providing a flexible resource who can support both ongoing maintenance and future modernization efforts.
Responsibilities
• Maintain and support the existing Microsoft Azure AD B2C environment.
• Troubleshoot customer registration, login, authentication, identity, and access issues.
• Create and update authentication rules, user flows, policies, and custom identity functionality.
• Support the customer-facing loyalty registration and ecommerce login experience.
• Maintain integrations between Azure AD B2C, customer databases, loyalty platforms, ecommerce applications, and other enterprise systems.
• Support the planned transition of customer identity integrations from Salesforce to ECRS.
• Develop, configure, and troubleshoot APIs and integration dependencies related to customer identity data.
• Implement new authentication rules, integrations, and platform functionality as business requirements evolve.
• Identify opportunities to improve platform reliability, supportability, security, and operating costs.
• Assess the existing Azure AD B2C environment and recommend a future-state customer identity strategy.
• Help plan and potentially deliver a migration from Azure AD B2C to Microsoft Entra External ID.
• Evaluate migration requirements, risks, dependencies, custom policies, data flows, and integration impacts.
• Coordinate with ecommerce, loyalty, security, application, and business teams throughout maintenance and migration activities.
• Provide documentation and knowledge transfer to help build greater internal ownership of the platform.
Required Qualifications
• Direct, hands-on experience supporting or developing within Microsoft Azure AD B2C.
• Experience with customer identity and access management, or CIAM, platforms.
• Strong knowledge of identity management within a Microsoft Azure environment.
• Experience configuring authentication policies, user flows, custom policies, registration processes, and login workflows.
• Strong understanding of OAuth 2.0, OpenID Connect, tokens, claims, and modern authentication protocols.
• Experience developing, supporting, or troubleshooting APIs and enterprise application integrations.
• Ability to support customer-facing authentication and registration platforms.
• Strong systems engineering, troubleshooting, and root-cause analysis skills.
• Ability to work independently within a specialized and business-critical technical environment.
• Generic Azure infrastructure, cloud migration, or internal workforce identity experience alone will not be sufficient. Candidates must have direct Azure AD B2C or closely related customer identity experience.
Preferred Qualifications
• Experience with Microsoft Entra External ID.
• Experience assessing or migrating Azure AD B2C environments to Microsoft Entra External ID.
• Experience with ecommerce, retail, loyalty, customer applications, or digital commerce platforms.
• Experience integrating identity platforms with Salesforce, ECRS, customer databases, or loyalty systems.
• Development or scripting experience supporting identity rules and integrations.
• Familiarity with alternative CIAM platforms such as Okta, Ping Identity, Keycloak, or JumpCloud.
• Experience transitioning identity platform knowledge from a consulting vendor to an internal or staff-augmentation resource.
• Experience documenting complex identity environments and providing technical knowledge transfer.
Ideal Candidate Profile
The ideal candidate is a hands-on Systems Engineer or CIAM Engineer who can quickly assume responsibility for an existing Azure AD B2C environment. This person should be comfortable maintaining a production customer identity platform, supporting APIs and integrations, implementing new authentication functionality, and working across technical and business teams.
The individual does not need to be a full-time application developer, but they must be technically capable of working with authentication rules, customer data, custom policies, APIs, system integrations, and customer-facing login experiences.
The strongest candidate will be able to provide immediate maintenance support while also helping determine the most practical long-term migration path to Microsoft Entra External ID.
Business Outcome
• Maintain reliable customer login and loyalty registration services.
• Reduce ongoing Azure AD B2C support costs.
• Build greater internal control and knowledge of the identity environment.
• Support upcoming Salesforce-to-ECRS integration changes.
• Prepare for and potentially deliver a future Microsoft Entra External ID migration.
• Reduce long-term dependency on the current vendor support model.
The projected hourly range for this position is $60 to $65.
On-Demand Group (ODG) provides employee benefits which includes healthcare, dental, and vision insurance. ODG is an equal opportunity employer that does not discriminate on the basis of race, color, religion, gender, sexual orientation, age, national origin, disability, or any other characteristic protected by law.