Data Integration Engineer

Job Description AWS Cloud Engineer (Redshift SSO Integration using OIDC/SAML):

Location : Boston, MA

Overview

We are seeking a skilled Cloud Engineer / Identity & Access Specialist with hands-on experience implementing Single Sign-On (SSO) authentication for Amazon Redshift using Active Directory (AD) federation with OIDC/SAML. The ideal candidate will have a strong background in AWS Identity and Access Management (IAM), enterprise IdPs (Azure AD, Okta, Ping, etc.), and secure integration of data platforms into corporate identity ecosystems.

Key Responsibilities

• Design, implement, and maintain SSO authentication flows for Amazon Redshift using OIDC/SAML-based federation with Active Directory and enterprise IdPs.
• Configure and manage IAM roles, trust policies, and STS token-based authentication to enable secure Redshift access.
• Integrate Redshift with Azure AD/Okta/other IdPs to support role-based access control (RBAC) for business and technical users.
• Automate Redshift credential management using AWS SDKs, Redshift API (GetClusterCredentials), and token-based authentication.
• Collaborate with security and compliance teams to ensure solutions meet enterprise security standards (MFA, conditional access, least privilege).
• Troubleshoot and optimize JDBC/ODBC client connectivity for BI tools (Tableau, Power BI, etc.) using federated authentication.
• Document authentication flows, policies, and procedures for both technical teams and end users.

Required Skills & Experience

• Strong hands-on experience with AWS Redshift (provisioned or serverless) and IAM authentication.
• Expertise in SSO protocols: SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience federating Active Directory / Azure AD / Okta / Ping Identity with AWS IAM for application authentication.
• Familiarity with AWS STS, IAM Roles, and trust policies for cross-service authentication.
• Experience integrating Redshift with BI/reporting tools (e.g., Tableau, Power BI) using token-based authentication.
• Proficiency with AWS CLI / SDKs / API for managing temporary credentials.
• Strong understanding of identity governance, RBAC, and data security best practices.