DevOps Engineer – Entra External ID & Observability (Azure)
Description
Description
At Digital Forms we deliver digital transformation projects for clients in the US, EU and UK. We’re looking for a hands-on DevOps Engineer to take over the identity and observability workstream on a live enterprise Azure programme.
The platform is new and in active delivery, with go-live planned for January 2027. The Azure foundation (landing zones, networking, central logging) is already built. The remaining work covers identity, Azure Functions and application observability, and that’s where you come in.
You’ll implement, test and document solutions within the architecture decisions made by our Solution Architect and the client’s architecture governance. You’ll also join client technical sessions.
What you’ll do
Configure and extend Entra External ID (CIAM): user flows, app registrations, custom authentication extensions, claims
Build and secure Azure Functions (webhook/HTTP, managed identity, Key Vault)
Set up monitoring, alerting and dashboards with Application Insights, Log Analytics and OpenTelemetry
Maintain the related Terraform code and Azure DevOps pipelines
Troubleshoot token flows and claims across OAuth2 / OIDC integrations
Requirements
Hands-on experience with Entra External ID (CIAM): user flows, app registrations, custom authentication extensions, claims, Microsoft Graph API (Azure AD B2C experience is a plus, but not a substitute)
Solid understanding of OAuth2, OIDC, JWT and On-Behalf-Of flows, including claim troubleshooting
Azure Functions with managed identity and Key Vault
Observability: Application Insights, Log Analytics (KQL), OpenTelemetry, alerts, dashboards, PII-safe logging
Terraform on Azure and Azure DevOps Pipelines
English at C1 level
What we offer
B2B contract, 3-month project (with extension potential)
50–100% engagement
100% remote, no travel required
Flexible hours (no fixed overlap required)
A modern Azure programme for an enterprise client, with a clear architecture already in place
Skills
As published by recruitee · 12 questions
Basics
Full name, Email, CV, Cover letter, Phone
Short answers (2)
- Which Country and City are you primarily based in?
- When would you be available to start a new role?
Pick from a list (10)
- How many years of experience on this position you have?
- What's your seniority level?
- What is your English language proficiency level?
- Do you have a Polish business entity that can invoice B2B, or are you willing to set one up before starting?
- What is your preferred B2B net hourly rate [PLN]? Please keep in mind that this rate should cover the use of your own computer and any vacation time, as we don't offer paid leave or benefits. It's easier to divide your expected salary by 168 hours.
- Can you work on your computer?
- Are you looking for a full-time commitment with your next role, or are you seeking something more flexible or parallel to other engagements?
- We have most of our clients in western countries. Are you able to work in 3 to 7 pm overlap?
- Do you have hands-on experience configuring Entra External ID (not only Azure AD B2C)?
- Have you built a custom authentication extension using Azure Functions?