React/Azure Developer – Secure Customer Portal (Entra ID, Dataverse, SharePoint Integration)

We're looking for an experienced full-stack developer/team to build a secure customer portal for our existing AI Statement Conversion platform. Overview: The platform already converts financial documents (Provider Statements, Bank Statements) using AI — that engine is built and out of scope. We need a production-ready web portal that lets authenticated customers upload documents, track conversion status, download results, and submit feedback. Tech stack (preferred, alternatives open to discussion): React + CSS frontend Microsoft Entra ID authentication (with MFA) + App Registrations Microsoft Dataverse Web API Azure App Service hosting Integrates with existing SharePoint document storage, Power Automate, Azure Functions, and Azure Key Vault Key functionality: Multi-tenant architecture with strict logical separation between customer companies Two user roles: Super Administrator (internal) and Standard User (customer) Dashboard showing upload/processing/exception status Two-step file upload (document type → file upload), PDF/CSV/Excel, 25MB max Searchable/sortable/filterable table of converted files with download links Free-text feedback submission on conversion quality Company and user administration (Super Admin only) Audit logging for uploads/downloads (30-day retention) Security requirements: Entra ID + MFA, HTTPS, RBAC OWASP Top 10 compliance Secrets in Azure Key Vault (managed identity, no credentials in front-end) Secure token handling via MSAL (no localStorage) CORS restricted to known origins Scale: ~100 companies, ~250 users, ~10,000 documents at retention limit. Must work on Edge and Chrome. Deliverables: Working application, technical architecture doc, deployment guide, configuration guide, admin guide, source code, installation documentation. Out of scope: AI engine/model training, existing Dataverse schema, existing Power Automate flows, mobile apps, email notifications, SharePoint→Blob migration, DR/BC planning, hosting costs. We're looking for someone/a team who: Has hands-on experience with Microsoft Entra ID + MSAL in production React apps Has worked with Dataverse Web API (not just Power Apps canvas apps) Understands multi-tenant SaaS security patterns Can work independently against a detailed spec (full FRS available on request/attached)