Customer Identity Platform Engineer

About the role

Contribute to the engineering, development, and 24/7 support of identity and access management highly available solutions for the customer identity platform on Azure AD B2C. Work closely with Ford teams (business, cyber security, applications, and other technical teams) and partners to ensure Azure AD B2C delivers a secure, premium customer experience aligned with Ford’s focus areas. This role requires a continuous improvement mindset, operational excellence, and technical prowess in Azure AD B2C, networking, security compliance, and software development.

Responsibilities

• Collaborate with the Technical Anchor to design, engineer, develop, deploy, and support new Azure AD B2C software and platform features adhering to Ford security, architecture, and IAM standards.
• Support delivery of tactical and strategic IAM solutions, including analysis, design, and implementation to improve security posture.
• Contribute to the development and implementation of IAM strategies and roadmap.
• Develop and maintain metric dashboards and monitoring/alerting systems.
• Provide day-to-day operations for requests, incidents, and problems.
• Create and maintain technical documentation (e.g., architecture diagrams, API documentation, coding standards, operational processes, configurations, application onboarding tips).
• Use modern Agile methodologies to deliver high-quality software on time and on budget.
• Use modern software delivery pipelines to automate deployment and testing of software and platform features.
• Maintain and update Ford custom policies using the Identity Experience Framework.
• Maintain and update UI (visual presentation of user journeys) in accordance with Ford UI Design Team specifications.
• Write clean, efficient, and maintainable code in C#, .NET Core, or other relevant languages that integrate with Azure Graph APIs.
• Support 24/7 coverage (rotational on-call support).

Requirements

• Bachelor’s Degree (or a combination of education and relevant employment).
• 3 to 5 years of experience with:
  • Demonstrated understanding and application/implementation of IAM principles, multi-factor authentication, and conditional access.
  • Working collaboratively to identify and solve problems with globally dispersed and diverse teams.
  • Designing, engineering, developing, deploying, and supporting features for a large, complex enterprise organization.
  • Strong problem-solving skills.
  • Ability to explain complex technical concepts to varied audiences (e.g., team members, business partners, senior management).
  • Strong verbal, interpersonal, and written skills to work directly with business owners and application teams for gathering information and troubleshooting.
  • Ability to work under pressure, meet strict deadlines, challenge the status quo, and manage ambiguity.
• 1 to 2 years of experience with:
  • Dedication to delivering a secure, always-on customer identity platform.
  • Demonstrated understanding of Azure AD B2C.
  • Understanding of Application Insights, Log Analytics, Azure App Services, Azure API Management.
  • Demonstrated experience with Dev Enablement Tools (e.g., Jira, GitHub, Postman).
  • Demonstrated experience with PowerShell.

Preferred Qualifications

• 3-5 years of experience managing Azure AD B2C, including writing and managing custom policies.
• 2-5 years of experience with PowerShell, C#, .NET Core, or other relevant languages.
• Experience designing, engineering, developing, deploying, and supporting features for a large, complex enterprise organization.
• Understanding of Site Reliability Engineering (SRE) principles.
• Industry-recognized certifications (e.g., AZ-900: Azure Fundamentals, Certified Information Systems Security Professional (CISSP)).

Benefits

• Immediate medical, dental, vision, and prescription drug coverage.
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care, and more.
• Family-building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more.
• Vehicle discount program for employees and family members and management leases.
• Tuition assistance.
• Established and active employee resource groups.
• Paid time off for individual and team community service.
• Generous schedule of paid holidays, including the week between Christmas and New Year’s Day.
• Paid time off and the option to purchase additional vacation time.

Pay

This position is a range of salary grades GSR7-8.

Schedule

SOUTHEAST MI RESIDENTS: This role is posted as remote unless you reside within 50 miles of Dearborn, MI—in which case on-site presence up to 4 days a week is requested.