Solution Architect

Ensoft Consulting; Pune District, Gurugram District, Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Ensoft Consulting is seeking an experienced Solution Architect with deep AWS Cognito expertise to design secure, scalable CIAM solutions for enterprise applications in Pune, India.

The role emphasizes identity federation, secure authentication flows, and collaboration with development teams to implement IAM services and governance.

Qualifications

• Hands-on experience with CIAM and AWS Cognito.
• Ability to design secure and scalable IAM solutions.
• Experience integrating identity providers Okta, Ping Identity, Entra ID.

Responsibilities

• Design enterprise IAM solutions using AWS Cognito.
• Lead CIAM design for customer-facing apps.
• Develop auth frameworks with OAuth2, OIDC, SAML 2.0.
• Create MFA, passwordless, social login, federation flows.
• Integrate Cognito with apps, APIs, and providers.
• Collaborate with dev teams to implement identity services.
• Build reusable auth libraries, APIs, SDKs.
• Secure API auth with JWT and Cognito User Pools.
• Design identity federation with Okta, Ping, Entra ID.
• Ensure Zero Trust and regulatory compliance.
• Participate in architecture and code reviews.
• Support CI/CD and IaC for identity services.
• Provide technical leadership and mentoring.

Skills

AWS Cognito

CIAM design

OAuth 2.0

OIDC

SAML 2.0

MFA

JWT

Zero Trust

CI/CD

IaC

Tools

Okta

Ping Identity

Microsoft Entra ID

Job description

We are looking for an experienced Solution Architect with a strong software development background and deep expertise in AWS Cognito to design and implement secure, scalable, and cloud-native Identity and Access Management (IAM) solutions.

The ideal candidate should have hands‑on experience in designing Customer Identity and Access Management (CIAM) solutions, integrating identity providers, and building authentication and authorization services using AWS Cognito. Experience with Okta or Ping Identity is highly desirable.

Key Responsibilities

• Design and architect enterprise‑grade identity and access management solutions using AWS Cognito.
• Lead the design and implementation of CIAM solutions for customer-facing applications.
• Develop secure authentication and authorization frameworks using OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0.
• Design user authentication flows, including MFA, password less authentication, social login, and federation.
• Integrate AWS Cognito with enterprise applications, APIs, and third‑party identity providers.
• Work closely with application development teams to implement secure identity services.
• Develop reusable authentication libraries, APIs, and SDK integrations.
• Architect secure API authentication using JWT, OAuth, and Cognito User Pools.
• Design Identity Federation with enterprise identity providers such as Okta, Ping Identity, or Microsoft Entra ID.
• Ensure compliance with security best practices, Zero Trust principles, and regulatory requirements.
• Participate in architecture reviews, code reviews, and technical design discussions.
Support CI/CD implementation and Infrastructure as Code (IaC) for identity services.Provide technical leadership and mentor development teams on identity architecture.