The role involves designing, implementing, and managing identity and access management (IAM) solutions using Microsoft Entra ID and Azure AD B2C. Key responsibilities include: Configuring and maintaining authentication and authorization protocols including OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0. Developing and managing access control mechanisms, including access tokens, API permissions, and OAuth grant types. Implementing and managing Azure Application Proxy connectors and HTTP header-based Single Sign-On (SSO) solutions. Onboarding enterprise applications into Azure AD and configuring secure authentication and authorization flows. Designing and enforcing Conditional Access policies aligned with security and compliance standards. Troubleshooting authentication, token, and federation-related issues across enterprise and customer-facing applications. Developing and maintaining Azure AD B2C custom policies, including claims transformations and user journey orchestration. Implementing Multi-Factor Authentication (MFA) for customer-facing applications. Integrating external systems using REST APIs within Azure AD B2C frameworks. Monitoring and diagnosing authentication flows using Application Insights, Kusto Query Language (KQL), and workbooks. Debugging and optimizing B2C authentication flows to improve performance and reliability. Collaborating with application teams, security teams, and stakeholders to ensure secure IAM implementations. Providing production support, including incident management, root cause analysis, and issue resolution. Basic Qualifications 5 years of experience in Identity and Access Management (IAM) engineering or architecture. 5 years of hands-on experience with Microsoft Entra ID (Azure AD) and Azure AD B2C. Strong expertise in authentication and authorization protocols: OAuth 2.0 (3 years), OpenID Connect (OIDC) (3 years), SAML 2.0 (3 years). 3 years of experience working with access tokens, API permissions, and OAuth grant types. Proven experience with Azure AD enterprise application onboarding (2 years), Conditional Access policy design and implementation (2 years), Azure Application Proxy and SSO configurations (2 years). 3 years of hands-on troubleshooting experience in authentication, token, and federation issues. Strong experience with Azure AD B2C: Custom policies and user journeys (3 years), Claims transformations and REST API integrations (2 years). Experience with monitoring and diagnostics tools: Application Insights (2 years), KQL and Azure Workbooks (2 years). Solid understanding of MFA implementation and identity security best practices. Nice to Have Programming experience in .NET / C#. Experience providing production support in IAM environments. Familiarity with CI/CD pipelines and DevOps practices for IAM deployments. Experience with identity governance, risk-based authentication, or zero trust frameworks. Certifications such as Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Solutions Architect Expert. Company Overview NTT DATA strives to hire exceptional, innovative, and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. NTT DATA's Client is currently seeking a specialist to join their team in Halifax, Nova Scotia, Canada. This position is remote. About NTT DATA NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize, and transform for long-term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation, and management of applications, infrastructure, and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com. NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.