Solution Architect-AWS Cognito

Location: Hyderabad,Bangalore,Pune,Chennai,Gurugram

The Solution Architect will lead the design and delivery of secure, scalable, cloud-native Identity and Access Management (IAM) and Customer IAM (CIAM) solutions on AWS. The role centers on deep expertise with AWS Cognito to build authentication, authorization, and federation capabilities for customer-facing applications. The architect will integrate enterprise identity providers, design MFA/passwordless/social logins, and implement OAuth 2.0, OpenID Connect, and SAML 2.0 flows. They will collaborate closely with engineering teams, guide CI/CD and Infrastructure as Code, and enforce Zero Trust and security best practices. This is a client-facing position requiring excellent communication and the ability to provide technical leadership and mentorship.

Required Qualifications

• 10+ years of software development and solution architecture experience; strong hands-on coding background (Java or Node.js preferred; Python good to have).
• 5+ years hands-on designing and implementing AWS Cognito (User Pools, Identity Pools, Hosted UI, Lambda Triggers, Custom Auth Flows, Federation, JWT, Groups/Roles, MFA).
• Proven experience designing and delivering enterprise IAM/CIAM solutions, including SSO, RBAC, ABAC, and Identity Federation.
• Expertise with authentication and authorization standards: OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, JWT, PKCE.
• Strong AWS knowledge: API Gateway, Lambda, CloudFront, Route 53; serverless and microservices patterns; AWS SDKs.
• DevOps and platform skills: Git; CI/CD (GitHub Actions, Jenkins, AWS CodePipeline); Docker; Kubernetes/EKS (preferred).
• Infrastructure as Code using Terraform or CloudFormation.
• Experience integrating with enterprise IdPs (Okta, Ping Identity, Microsoft Entra ID) and building secure API authentication patterns.
• Understanding of Zero Trust, security best practices, and regulatory standards (PCI DSS, GDPR, HIPAA, SOC 2).
• Excellent verbal and written communication skills for client-facing engagements; ability to lead architecture reviews, code reviews, and mentor teams.

Responsibilities

• Design and architect enterprise IAM/CIAM solutions using AWS Cognito for customer-facing applications.
• Develop secure authentication and authorization frameworks using OAuth 2.0, OIDC, SAML 2.0, JWT, and PKCE.
• Design user authentication flows including MFA, passwordless, social login, and federation with external IdPs.
• Integrate AWS Cognito with applications, APIs, and third-party identity providers; implement secure API authentication with Cognito User Pools and OAuth/JWT.
• Lead identity architecture with Zero Trust principles, security best practices, and compliance requirements.
• Create reusable authentication libraries, APIs, and SDK integrations; support CI/CD and Infrastructure as Code for identity services.
• Collaborate with product and engineering teams; participate in architecture and code reviews; provide technical leadership and mentorship.
• Design identity federation with enterprise IdPs such as Okta, Ping Identity, and Microsoft Entra ID.