AWS Cognito Migration Engineer

We are seeking an experienced AWS Engineer with strong expertise in Identity and Access Management (IAM) to lead the migration from Auth0 to AWS Cognito. The role involves designing implementing and managing the end-to-end migration process while ensuring secure seamless and scalable authentication for users. The ideal candidate has a solid background in authentication protocols AWS services and hands-on migration execution.

Responsibilities

• Lead the migration of authentication services from Auth0 to AWS Cognito.
• Gather requirements analyze existing user flows and design Cognito architecture.
• Configure Cognito User Pools App Clients MFA Hosted UI custom attributes and Lambda triggers.
• Develop migration scripts for user metadata transformation import and password reset flows.
• Update backend integrations including AWS Lambda and AppSync to work with Cognito APIs.
• Adapt frontend and backend systems to support Cognito JWT tokens and claims.
• Conduct thorough testing of login signup password reset MFA and role-based access flows.
• Collaborate with development security and operations teams to ensure smooth integration.
• Provide go-live support monitor authentication services and resolve user issues post-migration.
• Document architectures workflows and standard operating procedures.
• Decommission Auth0 after successful migration.

Required Skills & Experience

• Hands-on AWS experience with a focus on Cognito Lambda AppSync and IAM.
• Proven experience in Auth0 to AWS Cognito migration (or similar IAM platform transitions).
• Strong knowledge of authentication standards: OAuth2.0 OIDC JWT and SAML.
• Experience with MFA federated identity and custom authentication flows in Cognito.
• Proficiency in scripting (Python/) for migration automation.
• Familiarity with Infrastructure as Code (Terraform/CloudFormation).
• Good understanding of API Gateway VPC and IAM policies.
• Strong problem-solving and troubleshooting skills in authentication/authorization systems.

Good to have Certifications

• AWS Certified Security Specialty
• AWS Certified Solutions Architect Associate/Professional
• AWS Certified Developer or DevOps Engineer