Senior IAM Engineer

About the Position

We are seeking a Senior IAM Engineer to design, implement, and maintain robust identity and access management solutions for customer-facing applications, ensuring secure and seamless authentication experiences across web, mobile, and API platforms. Req# 1074797019

Responsibilities

• Design and implement Microsoft Entra External ID / Azure AD B2C solutions for customer-facing applications
• Configure user sign-up, sign-in, password reset, MFA, and account management workflows
• Implement authentication using OAuth 2.0, OpenID Connect, and SAML protocols
• Integrate external identity providers such as Google, Microsoft, Facebook, and enterprise IdPs
• Develop and maintain custom authentication policies and user flows
• Configure application registrations, redirect URIs, scopes, claims, and permissions
• Integrate Entra External ID with web, mobile, and API applications
• Troubleshoot authentication, authorization, token, and federation issues
• Implement security controls including MFA, Conditional Access, and identity protection
• Collaborate with development teams to integrate MSAL and secure APIs
• Monitor authentication activity, investigate security issues, and support migration from Azure AD B2C to Microsoft Entra External ID
• Automate identity configurations and document architecture, configurations, and authentication flows

Requirements

• 5+ years of experience as an IAM Engineer or in a similar role designing and implementing identity solutions
• Expertise in Microsoft Entra External ID and Azure AD B2C for customer-facing applications
• Proficiency in OAuth 2.0, OpenID Connect, and SAML authentication protocols
• Experience integrating external identity providers such as Google, Microsoft, and Facebook
• Skills in configuring application registrations, redirect URIs, and scopes, claims, and permissions
• Background in troubleshooting authentication, authorization, and federation issues
• Knowledge of Conditional Access, MFA, and identity protection controls
• Familiarity with Microsoft Authentication Library (MSAL) and secure API integration
• Competency in Azure CLI, PowerShell, and Terraform/ARM/Bicep for automation
• Understanding of Azure AD B2C to Microsoft Entra External ID migration processes

Skills

• Security.IAM
• Azure AD External Identities
• Microsoft Entra ID

We Offer

• Extended Healthcare with Prescription Drugs, Dental and Vision, and Healthcare Spending Account (Company Paid)
• Life and AD&D Insurance (Company Paid)
• Employee Assistance Program (Company Paid)
• Telehealth (Company Paid)
• Short-term Disability (Company Paid)
• Long-Term Disability
• Paid Time Off (including vacation and sick days)
• Registered Retirement Savings Plan (RRSP) with Company match
• Maternity/Parental/Adoption Leave Top-up
• Employee Stock Purchase Program
• Critical Illness Insurance
• Employee Discounts
• Unlimited access to LinkedIn learning solutions

About the Company

[Company description if present]