Security Architect

Incedo is a US-based consulting data science and technology services firm with over 3000 people helping clients
from our six offices across US Mexico and India. We help our clients achieve competitive advantage through
end-to-end digital transformation. Our uniqueness lies in bringing together strong engineering data science and
design capabilities coupled with deep domain understanding. We combine services and products to maximize
business impact for our clients in telecom Banking Wealth Management product engineering and life science
& healthcare industries.
Working at Incedo will provide you an opportunity to work with industry leading client organizations deep
technology and domain experts and global teams. Incedo University our learning platform provides ample
learning opportunities starting with a structured onboarding program and carrying throughout various stages of
your career. A variety of fun activities is also an integral part of our friendly work environment. Our flexible
career paths allow you to grow into a program manager a technical architect or a domain expert based on your
skills and interests.
Our Mission is to enable our clients to maximize business impact from technology by

• Harnessing the transformational impact of emerging technologies
• Bridging the gap between business and technology

We are seeking a highly skilled Microsoft Entra B2C (Customer Identity and Access Management CIAM) Engineer to design build and operate secure scalable identity solutions for external users. This role focuses on delivering modern authentication registration and user management capabilities for customer-facing applications using Microsoft Entra External ID.
The ideal candidate will have a deep understanding of identity and access management principles technologies and best practices. This role involves implementing and managing IAM solutions to ensure the security and efficiency of our IT infrastructure.

Key Responsibilities - CIAM Architecture & Engineering
Design and implement CIAM solutions using Microsoft Entra B2C. Build and maintain custom policies (IEF). Define identity architecture for onboarding authentication and federation.
Authentication & Identity Federation
Configure OpenID Connect OAuth 2.0 and SAML. Integrate social and enterprise identity providers. Design secure token issuance and validation strategies.
User Journeys & Experience
Develop self-service registration invite onboarding password reset and MFA flows. Customize UI/UX branding and localization. Implement progressive profiling.
Application & API Integration
Integrate B2C with web mobile and APIs. Implement claims transformation and token customization. Collaborate with dev teams on token usage.
Identity Lifecycle Management
Manage external identities custom attributes and schema. Implement provisioning synchronization and lifecycle processes.
Security & Risk Management
Implement MFA session controls and Zero Trust patterns. Protect against account takeover and fraud scenarios.
Operations & Support
Monitor platform performance troubleshoot issues provide Tier 3 support and maintain documentation.

Good to have:
Proficient in programming/scripting languages (e.g. Java PowerShell Python) for customization and automation.

What you will need to have:
Bachelors degree in computer science Information Systems or a related field (or equivalent experience).
Over 7 years of direct IAM related experiences
Proven experience as an IAM Engineer specifically implementing the Microsoft B2C in medium to large Organizations
Strong knowledge of identity and access management concepts principles and technologies.
Hands-on experience with IAM solution design implementation and integration.
Familiarity with authentication protocols (e.g. SAML OAuth OpenID Connect) and directory services (e.g. LDAP Active Directory).
Strong analytical and problem-solving skills with the ability to assess complex environments and identify areas for improvement.
Excellent communication and interpersonal skills with the ability to collaborate effectively with cross-functional teams and stakeholders.

Required Qualifications
Experience with CIAM and Microsoft Entra B2C. Strong knowledge of OIDC OAuth and SAML. Experience with custom policies (IEF) APIs and token-based authentication.

Preferred Qualifications
Experience with identity sync API-driven architectures and Zero Trust. Certifications such as SC-300 preferred.

Core Competencies
Strong troubleshooting skills ability to translate business requirements and excellent collaboration capabilities.

We value diversity at Incedo. We do not discriminate based on race religion color national origin gender sexual orientation age marital status veteran status or disability status.