Senior Technical Program Mgr, Amazon Leo Trust Services

Project Leo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world. Amazon Leo Trust Services (ALTS) owns the cryptographic infrastructure that underpins Leo's satellite constellation, including certificate lifecycle management, key generation and provisioning, secure communications, and post-quantum cryptographic readiness.

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

About the role

We are looking for a Technical Program Manager to own the certificate rotation and cryptographic algorithm migration program across Leo. As the constellation scales, the cryptographic foundation must evolve with it: enabling automated certificate rotation across dozens of integration points, migrating to next-generation algorithms including post-quantum cryptography, and ensuring devices designed to operate for 15+ years remain cryptographically current throughout their lifetime. This is a rare opportunity to shape how a global satellite network maintains cryptographic trust at scale.

Responsibilities

• Own the end-to-end program for certificate rotation and cryptographic algorithm migration across Leo's constellation infrastructure.
• Build a unified view of how certificates are consumed across 10+ integration points (from full certificate chain transmission to hard-coded serial numbers on devices).
• Identify and drive resolution of constraints that prevent automated rotation (including a 1,200-byte MTU limit over UDP that blocks larger post-quantum material).
• Orchestrate cross-team work required to deliver cryptographic agility.
• Partner with hardware, firmware, ground systems, and network teams to define out-of-band distribution workflows needed for next-generation certificate formats.
• Manage program lifecycle from requirements through delivery, negotiate priorities across teams that do not share a reporting chain, and drive crisp decisions in ambiguous technical territory.
• Communicate progress, risks, and tradeoffs to Directors and VPs.
• Contribute to broader ALTS programs including PKI infrastructure migration to AWS data centers, post-quantum readiness for upcoming tapeout deadlines, and deprecated service decommissions.

A day in the life

• Drive alignment across teams that each own a piece of the certificate puzzle but have never had a single orchestrator connecting their work.
• Facilitate design reviews to define how a ground service will consume global certificates instead of regional ones.
• Track deprecated key management services through final migration milestones before hard shutdown deadlines.
• Build and maintain the program plan connecting hardware tapeout dates, firmware release schedules, and service deployment timelines into a coherent delivery sequence.
• Identify risks early, escalate effectively when teams are blocked, and write narratives to help leadership understand why cryptographic agility matters for Leo's long-term operational security.

The work is both strategic (shaping how Leo's PKI evolves over the next decade) and tactical (ensuring the next certificate rotation does not cause loss of satellite control).

About the team

The Leo Trust Services team owns the cryptographic foundation for Project Leo's satellite broadband service. We manage the keys, certificates, and secure communication protocols that protect everything from chip provisioning in manufacturing through satellite control in orbit. Our 2027 priorities center on post-quantum readiness, infrastructure resilience, and the cryptographic agility program this TPM will own.

Qualifications

Basic Qualifications

• 5+ years of technical program management experience.
• 5+ years of work with software development lifecycle from conception to delivery experience.
• Bachelor's degree in Engineering, Computer Science, or a related technical field.
• Experience managing efforts in Unix/Linux environments, distributed systems, or developing large-scale web applications.
• Knowledge of concepts like system architecture, optimization, system dynamics, system analysis, statistical analysis, reliability analysis, and decision making.
• Experience in identifying security issues and risks, and developing mitigation plans.

Preferred Qualifications

• Experience in security or compliance consulting or advisory work in support of a highly technical environment.
• Knowledge of the AWS product suite.
• Knowledge of cloud computing services/deployment architecture.
• Experience with cryptographic systems, PKI, certificate management, or security infrastructure programs.
• Experience managing programs with hardware and software co-dependencies (e.g., silicon tapeouts, firmware, embedded systems).
• Experience in aerospace, satellite, IoT, or other environments where devices cannot be easily patched post-deployment.
• Familiarity with post-quantum cryptography, NIST standards, or compliance frameworks (NIST 800-53, CMMC).

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and option for Supplemental life plans).
• Employee Assistance Program (EAP) and Mental Health Support.
• Medical Advice Line and Flexible Spending Accounts.
• Adoption and Surrogacy Reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.

Pay

USA, WA, Redmond - $163,600.00 - $221,300.00 USD annually. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location.