IAM Architect

Senior AWS Cognito Phoenix, AZ Hybrid Long Term Contract!

Role Overview We are seeking a Senior AWS Cognito and Okta IAM Engineer to design, implement, and support secure identity and access management solutions for cloud-based web, mobile, and enterprise applications. This role will focus on Amazon Cognito, Okta Identity Cloud, authentication and authorization, identity federation, user lifecycle management, and integration with AWS services and enterprise applications. The ideal candidate has strong experience implementing scalable IAM and CIAM solutions using Amazon Cognito and Okta, along with modern identity standards such as OAuth 2.0, OpenID Connect, SAML 2.0, SCIM, and JWT.

Key Responsibilities

• Design and implement authentication and authorization solutions using Amazon Cognito User Pools and Identity Pools.
• Configure Cognito user registration, sign-in, account recovery, MFA, passwordless authentication, passkeys, and custom authentication flows.
• Integrate Amazon Cognito with Okta and other enterprise identity providers using SAML 2.0 and OpenID Connect.
• Configure Okta as an identity provider for Cognito-based web and mobile applications.
• Design and administer Okta Identity Engine, Universal Directory, applications, groups, profiles, policies, and authentication flows.
• Configure Okta Single Sign-On, Adaptive MFA, API Access Management, and contextual access policies.
• Implement automated user provisioning, profile synchronization, group management, and deprovisioning using SCIM.
• Build identity lifecycle processes using Okta Lifecycle Management and Okta Workflows.
• Develop custom integrations using Okta APIs, SDKs, Event Hooks, Inline Hooks, and Workflows Connector Builder.
• Configure Okta Sign-In Widget and Okta Auth SDKs for customized application authentication experiences.
• Implement OAuth 2.0 and OpenID Connect flows for web, mobile, single-page, machine-to-machine, and server-side applications.
• Configure app clients, callback URLs, domains, scopes, resource servers, groups, claims, and token-expiration policies.
• Implement secure access-token, ID-token, and refresh-token handling, including JWT validation and token rotation.
• Develop customized Cognito authentication and user-management processes using AWS Lambda triggers.
• Integrate Cognito with Amazon API Gateway, AWS Lambda, Application Load Balancer, AppSync, and other AWS services.
• Implement role-based and attribute-based access control using IAM roles, Okta groups, policies, scopes, claims, and user attributes.
• Protect authentication endpoints using AWS WAF, rate limiting, threat protection, and security-monitoring controls.
• Configure logging, monitoring, auditing, and alerting using Okta System Log, Amazon CloudWatch, and AWS CloudTrail.
• Troubleshoot authentication failures, SSO issues, federation errors, token-validation problems, provisioning failures, and access-control defects.
• Automate Cognito and Okta configurations using Terraform, AWS CDK, or AWS CloudFormation.
• Develop technical documentation, architecture diagrams, identity standards, security controls, and operational runbooks.
• Collaborate with application, cloud, DevOps, cybersecurity, compliance, and enterprise architecture teams.
• Participate in code reviews, security assessments, production deployments, incident response, and root-cause analysis.

Required Qualifications

• 7+ years of experience in software engineering, cloud engineering, cybersecurity, or identity and access management.
• 3+ years of hands-on experience with Amazon Cognito and Okta.
• Strong knowledge of Cognito User Pools, Identity Pools, app clients, resource servers, groups, domains, and Lambda triggers.
• Hands-on experience with Okta Identity Engine, Universal Directory, SSO, Adaptive MFA, and API Access Management.
• Experience integrating Amazon Cognito with Okta using SAML 2.0 or OpenID Connect.
• Strong understanding of OAuth 2.0, OIDC, SAML 2.0, SCIM 2.0, JWT, PKCE, authorization-code flow, and client-credentials flow.
• Experience implementing user provisioning and deprovisioning with Okta Lifecycle Management and SCIM.
• Experience configuring authentication policies, sign-on policies, group rules, profile mappings, claims, and authorization servers.
• Experience developing integrations using Okta APIs, SDKs, Event Hooks, Inline Hooks, or Workflows.
• Hands-on experience with AWS IAM, API Gateway, Lambda, CloudWatch, CloudTrail, WAF, KMS, and Secrets Manager.
• Proficiency in Python, Java, JavaScript/TypeScript, or Node.js for identity integrations and Lambda development.
• Experience integrating identity services with React, Angular, mobile, Java/Spring Boot, or other modern applications.
• Experience using Terraform, AWS CDK, or CloudFormation for identity infrastructure automation.
• Strong understanding of least-privilege access, Zero Trust principles, secure session management, secrets management, and API security.
• Strong troubleshooting, documentation, communication, and cross-functional collaboration skills.

Thanks & Regards, OpenKyber

2601 Little Elm Pkwy, Suite # 1804, Little Elm, TX 75068

Disclaimer: This message and any attached documents contain information from the professional services firm of OpenKyber that may be confidential and/or privileged. You may not read, disclose, copy, distribute, or use this information if you are not the intended recipient. If you have received this transmission in error, please notify the sender immediately by reply e-mail and delete this message. The sender of this email makes no warranties, expressed or implied, as to the completeness or accuracy of any information contained herein, or that this electronic communication (or its attachments) is virus-free.

For applications and inquiries, contact:View email address on us.fitly.work