AWS Cognito Solution Architect (CIAM & IAM)

VRINDA INTERNATIONAL; Gurugram District; On-site; INR 1,900,000 - 2,000,000; Full time

Job summary

VRINDA INTERNATIONAL is seeking an experienced AWS Cognito Solution Architect with a strong software development background to design and implement secure, scalable CIAM solutions on AWS. You will integrate enterprise IdPs like Okta, Ping Identity, or Microsoft Entra ID and leverage Lambda, API Gateway, and other AWS services to build cloud-native identity solutions.

The ideal candidate has 10–12 years of experience, a deep understanding of CIAM, OAuth 2.0, OIDC, SAML 2.0, and JWT, and will work

Qualifications

• 10–12 years of experience required in cloud security, CIAM, and identity solutions.
• Experience designing secure, scalable cloud-native identity platforms using AWS Cognito.
• Experience integrating enterprise IdPs such as Okta, Ping Identity, or Microsoft Entra ID.

Skills

AWS Cognito

CIAM

OAuth 2.0

OIDC

SAML 2.0

JWT

MFA

AWS Lambda

API Gateway

CloudFront

Route 53

CloudFormation

Terraform

Java

Node.js

REST APIs

Microservices

Git

Jenkins

GitHub Actions

AWS CodePipeline

Docker

Kubernetes

EKS

Tools

Terraform

CloudFormation

Docker

Kubernetes

Job description

We are looking for an experienced AWS Cognito Solution Architect with a strong software development background and expertise in Customer Identity and Access Management (CIAM). The ideal candidate will design and implement secure, scalable, cloud-native identity solutions using AWS Cognito, with experience integrating enterprise identity providers such as Okta, Ping Identity, or Microsoft Entra ID.

Requirements

Location: Pune | Bengaluru | Hyderabad | Chennai | Gurgaon

Experience: 10–12 Years

Employment Type: Full-Time (Unionsys Payroll)

CTC: ₹19–20 LPA

Work Mode: On-Site

Job Overview

Required Skills

• AWS Cognito (User Pools, Identity Pools, Hosted UI, Lambda Triggers, Federation, JWT, MFA)
• AWS IAM & Customer Identity and Access Management (CIAM)
• OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, JWT, PKCE
• AWS Services: Lambda, API Gateway, CloudFront, Route 53
• CloudFormation or Terraform
• Java or Node.js (Preferred)
• REST APIs & Microservices
• Git, Jenkins/GitHub Actions/AWS CodePipeline
• Docker & Kubernetes (EKS Preferred)

Preferred Skills

• Okta, Ping Identity, or Microsoft Entra ID
• Zero Trust Security Architecture
• Multi-tenant Identity Solutions
• AWS Well-Architected Framework
• Serverless Architectures
• Security Compliance (PCI DSS, GDPR, HIPAA, SOC 2)