[Hiring] Senior AWS Serverless Engineer @Santex

Role Description

AWS Serverless Engineer (Must: AWS Cognito)

The client is a globally recognized quick-service restaurant brand operating a large-scale digital ordering platform across mobile (iOS, Android), web, and kiosk channels. Their in-house Digital Engineering team has built and operates a production AWS Cognito identity platform serving millions of monthly active users across North America.

This engagement extends that platform to support European markets across multiple EMEA regions, with loyalty registration and authentication scoped to country-specific rules. The North American architecture is complete and documented. The candidate's primary mandate is backend middleware and identity implementation only — no UI work.

• Backend middleware and identity services only
• No UI work
• Dynatrace APM integration included

Qualifications

• Demonstrated production experience with AWS serverless infrastructure: Lambda, Cognito, SES, IAM, ACM, and CloudWatch
• Hands-on Terraform experience for AWS, including multi-environment or multi-region deployments
• Node.js proficiency — all Lambda functions are JavaScript
• Working knowledge of OAuth 2.0, OpenID Connect, and password-based Cognito authentication flows
• Familiarity with GDPR and AWS data residency controls in an EU deployment context
• Available to begin immediately

Requirements

• Direct AWS Cognito experience: USER_PASSWORD_AUTH flows, forced password reset (FORCE_CHANGE_PASSWORD state), and admin-initiated flows
• Experience implementing country-specific registration and consent logic within a shared identity platform
• JIT account migration experience with forced reset on first login patterns
• Dynatrace APM integration in a Lambda/serverless environment
• Social IdP integration via Cognito (Google, Apple, Facebook)
• Kount or equivalent fraud detection API integration
• Multi-regional identity platform experience at scale (1M+ MAU)

Candidate Profile Notes

The right candidate is a self-sufficient AWS serverless engineer who can work from existing architecture documentation and deliver independently against a fixed production deadline. This is not a design or architecture role — the client has a senior architecture team in place.

The most critical differentiator is experience with Cognito's password-based authentication model and forced migration/reset flows. Strong AWS generalists without Cognito-specific experience can succeed with solid Lambda, SES, and Terraform fundamentals, but expect a steeper ramp given the timeline.

Location

• Location: Remote — EU or US Eastern timezone overlap required
• Start: Immediate