AWS API Gateway and Security Engineer
About The Position
The AWS API Gateway and Security Engineer builds stateful, stateless, REST, HTTP, and WebSocket services using OAuth 2. The role requires hands-on development of proofs of concept (POCs) and implementation of changes in API Gateway, Cognito, and related systems. The engineer should understand cloud architecture and provide thought leadership to IT and business teams on API management and OAuth 2 security. The role includes developing and securing APIs, configuring integrations and CORS, managing API access, implementing logging and throttling, and applying security and data-protection practices. It also involves using Amazon Cognito user pools and identity pools for authentication and access to AWS and AppSync resources.
Requirements
- At least 4 years of hands-on experience with AWS API Gateway, including creating RESTful and WebSocket APIs.
- Experience with API Gateway framework components, including AWS Gateway Cache and CloudWatch.
- Experience with OAuth 2-based security using Cognito.
- Experience building Lambda proxy and non-proxy integrations.
- Experience connecting to AWS storage services, including Aurora, DynamoDB, and S3.
- Ability to develop HTTP APIs in API Gateway and control access using JWT and OAuth authorizers.
- Experience configuring HTTP API integrations and CORS.
- Experience creating REST APIs, controlling and managing access to them, configuring binary media types, and using OpenAPI.
- Experience developing and publishing WebSocket APIs and configuring throttling and protections.
- Experience configuring logging and CloudWatch metrics for API types.
- Experience with API Gateway extensions to OpenAPI.
- Experience using Cognito user pools and identity pools for authentication and access to AWS and AppSync resources.
- Ability to develop small-scale POCs based on business requirements.
- Ability to provide thought leadership in API management and OAuth 2-based security.
Nice To Haves
- Experience with EC2, EKS, container services, container registries, and ECS.
- Knowledge of CI/CD pipelines, including AWS CodePipeline.
- Knowledge of Azure or experience deploying solutions to AWS.
- Experience with Jenkins or similar technologies.
Responsibilities
- Build stateful, stateless, REST, HTTP, and WebSocket services using OAuth 2.
- Develop HTTP APIs and REST APIs in API Gateway, including configuring integrations and CORS.
- Control and manage access to HTTP and REST APIs using JWT and OAuth authorizers.
- Configure REST API binary media types and API definitions using OpenAPI.
- Develop and publish WebSocket APIs and protect them using token-bucket algorithms and account- and route-level throttling.
- Configure logging and CloudWatch metrics for each API type.
- Build Lambda proxy and non-proxy integrations.
- Use API Gateway framework components, including API Gateway cache and CloudWatch.
- Connect APIs to AWS storage services, including Aurora, DynamoDB, and S3.
- Configure Cognito user pools and identity pools for OAuth 2 authentication, third-party authentication, access to AWS services, and access to AppSync resources.
- Build small-scale POCs based on business requirements and implement system changes in API Gateway, Cognito, and related systems.
- Provide cloud architecture understanding and thought leadership on API management and OAuth 2 security to IT and business teams.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Education Level
No Education Listed
