DevOps engineer IRC307206

GlobalLogic Inc.; Kraków; Remote; PLN 180,000 - 260,000; Full time

Job summary

GlobalLogic Inc. is seeking a DevOps engineer to redesign RBAC for the MyCro platform on AWS, focusing on Cognito-based user roles, groups, and token claims. The role involves updating APIs and API Gateway to enforce new access controls with minimal disruption.

The ideal candidate will have hands-on AWS Cognito, API security experience, and strong Python scripting skills to automate tooling and tests, supporting a secure, scalable portal across environments.

Qualifications

• Hands-on AWS Cognito configuration in production, including group- or claim-based RBAC.
• Securing APIs with token-based authorisation on AWS.
• Making access-control changes to live systems without service disruption.

Responsibilities

• Implement the agreed RBAC model in AWS Cognito: user pools, groups, custom attributes and token claims.
• Configure identity pools and IAM role mappings for direct resource access.
• Update a large number of APIs to authorize requests against the new roles and scopes.
• Implement or update API Gateway authorisers (Cognito and Lambda authorsers).
• Migrate existing users and permissions to the new model without locking out agents.
• Roll changes out safely with feature flags, tests, and rollback plans.
• Write Python tooling and tests to validate access across the API estate.
• Document roles, permissions and onboarding steps for the portal.

Skills

RBAC design

Python scripting

DevOps

AWS services

API security

Tools

AWS Cognito

OpenID Connect

OAuth 2.0

JWT

AWS Lambda

Amazon ECS

AWS IAM

Terraform

AWS CDK

Bash

Job description

Amazon Web Services (CodeBuild, AWS, AWS Cloudwatch, AWS Lambda, EKS/ECS, NetworkingCloud Platforms: AWS, RBAC

The Client is one of the majour insurance companies in the UK.
This role supports a high-priority risk reduction programme for the Green Flag MyCro Platform, a complex technology estate built on AWS. Platform SMEs have already designed remediation plans and started putting them into effect. The DevOps engineer we’re looking for will help to redesign roles and access for MyCro’s business-critical agent portal using AWS Cognito, then update a significant number of APIs to enforce the new RBAC model safely and quickly. Python skills are strongly preferred.

Requirements

• Hands-on AWS Cognito configuration in production, including group- or claim-based RBAC
• Securing APIs with token-based authorisation on AWS
• Making access-control changes to live, business-critical systems without service disruption

Technologies and tools

• Identity: AWS Cognito (user pools, groups, app clients, OAuth 2.0 scopes, identity pools)
• Standards: OAuth 2.0, OpenID Connect, JWT
• Compute: AWS Lambda, Amazon ECS
• Access control: AWS IAM roles and policies
• Languages: Python (boto3, pytest); Bash
• Infrastructure as code: AWS CloudFormation and/or AWS CDK, or Terraform
• Strong Python for automation, Lambda functions and test tooling
• Bulk user and permission migrations in Cognito
• AWS certification (e.g. Security – Specialty)

Job responsibilities

• Implement the agreed RBAC model in AWS Cognito: user pools, groups, custom attributes and token claims
• Configure identity pools and IAM role mappings where AWS resources are accessed directly
• Update a large number of APIs to authorise requests against the new roles and scopes
• Implement or update API Gateway authorisers (Cognito authorisers and Lambda authorisers)
• Migrate existing users and permissions to the new model without locking out agents
• Roll changes out safely: feature flags or staged rollout, automated authorisation tests, rollback plans
• Write Python tooling and tests to validate access across the API estate
• Document roles, permissions and onboarding steps for the portal

  #LI-MK18 #LI-Remote

What we offer

Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.

Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.

DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.

Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.

Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.

Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.