AWS WAF​/Shield Engineer

This role is for an "AWS WAF/Shield Engineer" on a contract basis for 6 months, paying $75‑$80/hr, located in Schaumburg, IL.

We are looking for a Speartip Platform Modernization Architect for our client in Schaumburg, IL. The position is contract and pays $75‑$80/hr.

• Design and implement scalable, secure, and high‑performance architectures using AWS services.
• Create API‑first solutions using Amazon API Gateway integrated with Lambda microservices and backend systems.
• Architect secure and isolated Amazon VPC environments with appropriate network segmentation.
• Implement authentication and authorization solutions using Amazon Cognito.
• Design resilient content delivery and edge security solutions using Amazon Cloud Front and AWS WAF.
• Ensure secure storage and rotation of secrets using AWS Secrets Manager.
• Implement cloud security best practices for IAM, network segmentation, and data protection.
• Develop WAF rules to mitigate common application‑level security threats.
• Ensure architectural designs comply with recognized security frameworks.
• Build Infrastructure as Code using Cloud Formation or Terraform.
• Optimize performance, cost, and reliability following AWS Well‑Architected principles.
• Implement monitoring, logging, and observability using Cloud Watch, X‑Ray, or equivalent tools.
• Collaborate with development, Dev Ops, and security teams to translate business requirements into technical solutions.
• Participate in architectural reviews and provide guidance on AWS best practices.

• Strong expertise in AWS cloud architecture and engineering.
• Deep knowledge of API Gateway, REST APIs, JWT authorize rs, throttling, and usage plans.
• Expertise in Amazon VPC design including subnets, routing, security groups, NACLs, VPC peering, Private Link, and transit gateways.
• Strong experience with Amazon Cognito including MFA, hosted UI, federation, OAuth flows, and token management.
• Experience designing and implementing AWS WAF rule groups, bot mitigation, and Cloud Front integration.
• Strong understanding of Cloud Front cache policies, edge functions, and origin configurations.
• Experience with AWS Secrets Manager including rotation, access control, and KMS integration.
• Solid understanding of IAM policies and identity management.
• Strong understanding of networking fundamentals including TCP/IP, DNS, VPN, routing, and load balancing.
• Proficiency with Infrastructure as Code tools such as Cloud Formation and Terraform.
• Experience with serverless and microservices architectures using services such as Lambda, ECS, and Fargate.
• Extensive hands‑on experience in AWS cloud architecture or engineering.
• Experience designing and implementing secure, scalable cloud platforms.
• Experience troubleshooting production issues across networking, authentication, API management, and edge delivery layers.

• AWS cloud architecture and security.
• API management and serverless technologies.
• Networking and identity management.
• Infrastructure automation and monitoring.
• Strong problem‑solving and collaboration skills.

Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience.

For applications and inquiries, contact: