Security Engineer (Cognito and oAuth)

Title: Security Engineer (Cognito and oAuth) Location: Schaumburg, IL (Onsite) Position: Contract

Job Description: Key Responsibilities
Design and implement authentication authorization using AWS Cognito User Pools Identity Pools
Build and maintain OAuth20 OpenID Connect OIDC and SAML based authentication flows
Integrate Cognito with web mobile and backend services
Configure Cognito Hosted UI custom auth flows and multifactor authentication MFA
Implement tokenbased security access tokens ID tokens refresh tokens JWT validation
Integrate Cognito with other AWS services API Gateway Lambda IAM CloudFront
Optimize Cognito user migration federated identities and social login providers Google Facebook Azure AD
Troubleshoot authentication issues token problems and identity federation flows
Implement secure API authorization using resource policies Cognito authorizers and Lambda authorizers
Work closely with development teams to standardize authentication patterns across platforms

Required Skills:
Strong hands on experience with AWS Cognito User Pools Identity Pools User Groups MFA
Deep understanding of OAuth 20 OIDC and JWT
Experience integrating Cognito with REST APIs and server less architectures
Hands on AWS experience API Gateway Lambda IAM Cloud Formation Terraform Cloud Watch
Knowledge of identity federation SSO and social identity providers
Experience with secure coding and best practices for authentication
Experience troubleshooting authentication and authorization issues

Preferred Skills Good to Have:
Experience with AWS Amplify oAuth
Experience with SAML 20 integrations
Familiarity with Zero Trust and modern IAM strategies
Experience in Nodejs Python or Java for backend integration
Understanding of CICD and DevOps pipelines on AWS
Knowledge of Infrastructure as Code Terraform or Cloud Formation