Senior AWS Identity & Access Management (IAM) Engineer

Key Responsibilities
Design and implement authentication authorization using AWS Cognito User Pools Identity Pools
Build and maintain OAuth20 OpenID Connect OIDC and SAMLbased authentication flows
Integrate Cognito with web mobile and backend services
Configure Cognito Hosted UI custom auth flows and multifactor authentication MFA
Implement tokenbased security access tokens ID tokens refresh tokens JWT validation
Integrate Cognito with other AWS services API Gateway Lambda IAM CloudFront
Optimize Cognito user migration federated identities and social login providers Google Facebook Azure AD
Troubleshoot authentication issues token problems and identity federation flows
Implement secure API authorization using resource policies Cognito authorizers and Lambda authorizers
Work closely with development teams to standardize authentication patterns across platforms

Required Skills
Strong handson experience with AWS Cognito User Pools Identity Pools User Groups MFA
Deep understanding of OAuth 20 OIDC and JWT
Experience integrating Cognito with REST APIs and serverless architectures
Handson AWS experience API Gateway Lambda IAM CloudFormationTerraform CloudWatch
Knowledge of identity federation SSO and social identity providers
Experience with secure coding and best practices for authentication
Experience troubleshooting authentication and authorization issues

Preferred Skills Good to Have
Experience with AWS Amplify Auth
Experience with SAML 20 integrations
Familiarity with Zero Trust and modern IAM strategies
Experience in Nodejs Python or Java for backend integration
Understanding of CICD and DevOps pipelines on AWS
Knowledge of Infrastructure as Code Terraform or CloudFormation