CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, CCS is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States.
we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County.
We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market.
If you are a partner company, please submit resumes with contact information of your own W2 Consultants only. Submitted consultants are expected to have excellent communication skills.
Role Overview
We are seeking an Amazon Cognito Implementation & Migration Engineer to configure, integrate, test, and deploy authentication solutions. The role requires hands-on Cognito implementation, application integration, AWS Lambda development, and secure user migration from legacy authentication systems.
Key Responsibilities
- Configure Amazon Cognito User Pools, application clients, user attributes, custom scopes, claims, and token settings.
- Implement MFA, password policies, account recovery, and authentication workflows.
- Integrate web applications and portals with Cognito using standard authentication protocols.
- Implement and troubleshoot OAuth 2.0, OIDC, SAML 2.0, and JWT flows, including redirects, token validation, and application sessions.
- Develop and optimize AWS Lambda functions using Node.js or Python for authentication customization and JIT user migration.
- Implement secure connectivity to legacy SQL user repositories, credential verification, and user attribute mapping.
- Build migration exception handling, fallback processing, audit logging, and safeguards against duplicate user creation.
- Configure AWS WAF and KMS integrations according to approved security designs.
- Execute integration, credential verification, end-to-end, negative-path, and load testing.
- Troubleshoot authentication failures, migration issues, and login performance problems.
- Support production deployments, rollback activities, and operational issue resolution.
- Prepare configuration records, integration mappings, deployment instructions, and runbooks; conduct technical knowledge transfer.
Required Qualifications
- Minimum seven years of experience across IAM, enterprise cloud security, and enterprise application integrations.
- Demonstrated hands-on experience configuring and deploying Amazon Cognito User Pools in production environments.
- Strong knowledge of OAuth 2.0, OIDC, SAML 2.0, JWT, claims, and scopes.
- Strong development experience in Node.js or Python, including AWS Lambda development and troubleshooting.
- Experience with SQL-based user repositories, password hashing, secure credential verification, and JIT migration.
- Direct experience configuring AWS WAF and AWS KMS.
- Experience testing and troubleshooting authentication integrations and user migration workflows.
- Strong technical documentation and collaboration skills.
Preferred Qualifications
- Relevant AWS development or security certifications.
- Experience migrating users from legacy authentication systems to Amazon Cognito.
- Experience supporting high-volume, public-facing applications.
- Familiarity with infrastructure as code, CI/CD pipelines, and source-controlled configuration.
