AWS Data Engineer with IAM Admin
Mohammed GufranUnited StatesMIDPosted 13d ago
AWSIAMAmazon CognitoAWS CDKTerraformCloudFormationDatabricksInfrastructure-as-code
About the Role
We are seeking an AWS Data Engineer with IAM Admin expertise for a contract position at Juno Beach, FL, requiring Day1 Onsite presence. The role involves designing and implementing the cloud and identity foundation for the PSO platform.
Key Responsibilities
• Design and implement AWS infrastructure across development, test, and production environments
• Configure and manage IAM roles, policies, service accounts, identity federation, and least-privilege access controls
• Implement and support Amazon Cognito authentication and application integration patterns
• Develop and maintain infrastructure-as-code solutions using AWS CDK, Terraform, or CloudFormation
• Establish monitoring, logging, alerting, backup, recovery, and operational support practices
• Contribute to logical and physical architecture diagrams, implementation plans, technical testing, and production readiness
• Support troubleshooting, knowledge transfer, operating procedures, and support runbooks
• Design and support Databricks on AWS, including workspace architecture, VPC connectivity, S3 access, IAM roles, secrets, logging, monitoring, and infrastructure-as-code deployment patterns
Requirements
• Five or more years of hands-on AWS cloud engineering experience
• Strong experience with AWS IAM, Amazon Cognito, authentication, authorization, and identity federation
• Experience with AWS CDK, Terraform, CloudFormation, or comparable infrastructure-as-code tools
• Experience supporting enterprise cloud environments and production operations
• Knowledge of cloud networking, secrets management, encryption, monitoring, and logging
• Strong communication, documentation, troubleshooting, and stakeholder collaboration skills
• Hands-on Databricks experience on AWS, including workspace configuration, IAM and identity integration, S3 or data lake connectivity, cluster or compute policies, secrets management, networking, monitoring, and CI/CD or infrastructure-as-code automation