Job summary
This role is for a Principal Architect focused on designing secure scalable and resilient identity solutions using Azure AD B2C and Entra ID for a global enterprise client in a hybrid work model. The architect will collaborate with cross functional teams to modernize authentication journeys enhance security posture and simplify user experiences while aligning with enterprise standards.
Responsibilities
Design end to end identity and access management architectures using Azure AD B2C and Entra ID that align with enterprise security and compliance standards and support future scalabilityDrive definition of authentication and authorization flows for web and mobile applications using Azure AD B2C policies to deliver consistent and secure user journeysDevelop reusable architecture patterns and reference implementations for common identity scenarios enabling product teams to adopt secure by design practicesCoordinate with application and security teams to integrate modern identity capabilities such as multifactor authentication conditional access and passwordless options improving protection and usabilityReview solution designs and implementation plans from delivery teams ensuring adherence to architectural guardrails performance objectives and operational readinessProvide deep technical guidance on token based authentication protocols including OAuth and OpenID Connect within Azure AD B2C and Entra ID configurationsOptimize identity platforms for reliability and cost by defining capacity models tenant strategies and environment segmentation in line with business growth projectionsCollaborate with cybersecurity risk and compliance stakeholders to translate regulatory and policy requirements into practical identity control implementationsCreate comprehensive architecture documentation including diagrams configuration guidelines and runbooks to support operations and knowledge sharing within the organizationEngage with business product owners to understand customer identity needs and translate them into technical roadmaps that prioritize security user experience and time to marketCoordinate migration strategies from legacy identity providers to Azure AD B2C and Entra ID minimizing disruption and ensuring data integrity for existing usersDefine monitoring telemetry and incident response requirements for identity services enabling proactive detection of anomalies and rapid recovery from service issuesMentor engineering teams on best practices for integrating with Azure AD B2C and Entra ID building internal capability and reducing reliance on external specialists
Qualifications
Require six to ten years of experience in designing and implementing enterprise scale identity and access management solutions with a focus on Azure AD B2C and Entra IDRequire strong practical knowledge of OAuth OpenID Connect and modern authentication concepts applied in real world cloud and hybrid environmentsRequire hands on experience integrating web and mobile applications with Azure AD B2C using custom policies user flows and secure token handling practicesRequire experience configuring and tuning Entra ID capabilities such as conditional access multifactor authentication and identity protection featuresRequire proven background in working with cross functional teams including security operations and application development to deliver secure and resilient solutionsNice to have experience in designing zero trust aligned architectures that leverage Microsoft cloud security capabilities and industry best practicesNice to have experience with scripting or automation for identity configuration management using tools such as PowerShell and infrastructure as code approachesNice to have exposure to customer facing or stakeholder facing roles that involve gathering requirements communicating architectural decisions and supporting adoption outcomes
Certifications Required
Preferred certifications include Microsoft Cybersecurity Architect Expert or Microsoft Identity and Access Administrator Associate
About Cognizant:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Language requirements vary depending on roles, but we ask that all candidates have basic English proficiency for company-wide communications purposes. For roles based in Quebec, professional English proficiency is required, as you’ll deliver services to and collaborate with stakeholders outside the province who may not speak French.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, provincial or local laws.
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] with your request and contact information.
