CIAM Architect: AWS Cognito & Okta IAM Expert

Core AI Consulting Inc; Phoenix (AZ); On-site; USD 140,000 - 180,000; Full time

Job summary

Core AI Consulting Inc. is seeking a Senior AWS Cognito and Okta IAM Engineer to design, implement, and support secure identity and access management solutions for cloud-based applications.

You will focus on Cognito, Okta Identity Cloud, authentication and authorization, federation, user lifecycle, and integration with AWS services and enterprise apps. Strong expertise in OAuth, OIDC, SAML, SCIM, and JWT is essential.

Qualifications

• 7+ years of software/cloud engineering, cybersecurity, or IAM.
• 3+ years with Amazon Cognito and Okta hands-on.
• Deep knowledge of Cognito User Pools, Identity Pools, Lambda triggers, groups.
• Experience integrating Cognito with Okta via SAML 2.0 or OIDC.

Responsibilities

• Design and implement IAM/CIAM solutions using Cognito and Okta.
• Integrate with AWS services and enterprise applications.
• Configure MFA, SSO, API access management, and adaptive controls.
• Automate provisioning with SCIM and manage user lifecycles.
• Develop security standards, runbooks, and documentation.

Skills

Amazon Cognito

Okta

IAM

CIAM

OAuth 2.0

OIDC

SAML 2.0

SCIM

JWT

Terraform

AWS CDK

CloudFormation

Lambda

API Gateway

CloudWatch

WAF

Zero Trust

Least Privilege

Security Documentation

Cross-functional Collaboration

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Okta API/SDKs

Okta Lifecycle Management

Okta Workflows

Terraform

AWS CDK

CloudFormation

Lambda

Cognito API/SDKs

Job description

Core AI Consulting Inc. is seeking a Senior AWS Cognito and Okta IAM Engineer to design, implement, and support secure identity and access management solutions for cloud-based applications.

You will focus on Cognito, Okta Identity Cloud, authentication and authorization, federation, user lifecycle, and integration with AWS services and enterprise apps. Strong expertise in OAuth, OIDC, SAML, SCIM, and JWT is essential.