CCS Global Tech is a rapidly growing Information Technology company with a diverse portfolio of technology products and services and a large network of industry partnerships. With over 22 years of being a successful business with a global talent pool and presence, CCS is a certified Microsoft Gold Partner and specializes in delivering expert Microsoft based solutions for technical and business needs. We have been recognized by Inc. 500 Magazine as one of the fastest growing small companies in the Unites States.

we are a Tier 1 vendor for the City and County of San Francisco for Cloud Services, Staffing Services and Training Services. For this multi-year opportunity with a diverse set of needs to address, we are currently focusing on establishing partnerships with individuals as well as companies who can help us enhance our overall service portfolio, cut lead times, and ultimately help us deliver successfully. We currently hold sizable Government accounts in the San Francisco bay area including City and County of San Francisco, San Mateo County, and Santa Clara County.

We take great pride in our global reach and local influence. Your experience alongside our highly skilled and talented internal team who guide you along the way, offers key insights into what helps you stand out in a competitive job market.

If you are a partner company, please submit resumes with contact information of your own W2 Consultants only. Submitted consultants are expected to have excellent communication skills.

Key Responsibilities

Assess existing authentication systems, user repositories, application dependencies, and security requirements.
Design Amazon Cognito User Pools, application clients, user attributes, custom claims, scopes, and token configurations.
Define MFA, password policies, account recovery, session management, and access controls.
Design application authentication and federation using OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT.
Develop secure migration strategies for transitioning users from legacy SQL-based authentication systems to Cognito.
Define Just-In-Time (JIT) migration workflows, credential verification, exception handling, fallback procedures, and rollback approaches.
Design integrations with AWS Lambda, WAF, and KMS.
Establish requirements for authentication performance, availability, monitoring, audit logging, and recovery.
Guide implementation teams, review configurations and code, and support testing and production readiness.
Prepare architecture diagrams, technical designs, security documentation, and operational guidance.
Conduct technical reviews and knowledge transfer sessions with application, security, and operations teams.

Required Qualifications

Minimum seven years of experience across IAM, enterprise cloud security, and enterprise application integrations.
Demonstrated hands-on experience designing and deploying Amazon Cognito User Pools in production environments.
Strong knowledge of OAuth 2.0, OIDC, SAML 2.0, JWT, claims, and scope design.
Experience designing MFA, federation, account recovery, and secure authentication workflows.
Strong understanding of legacy SQL user repositories, password hashing, credential verification, and JIT migration.
Direct experience with AWS WAF, AWS KMS, and AWS Lambda development using Node.js or Python.
Experience designing secure, scalable authentication solutions and addressing performance and operational requirements.
Strong technical documentation, communication, and stakeholder coordination skills.

Preferred Qualifications

Relevant AWS architecture or security certifications.
Experience modernizing identity services for large-scale, public-facing applications.
Familiarity with security frameworks such as NIST SP 800-53.
Experience with infrastructure as code and automated deployment practices.

AWS IAM & Cognito Architect

Key skills

About this role