Software Development Engineer, Amazon Route 53, Route 53 Resolver Firewall & Profiles

About the role

Amazon Route 53 is seeking a mid-level Software Development Engineer to join the team that designs, builds, and operates Route 53 Resolver DNS Firewall and Route 53 Profiles. This role focuses on cloud-native DNS security and DNS resource management services, protecting millions of VPCs from malicious domain activity and enabling centralized DNS configuration management across multi-account environments.

You will ensure DNS traffic is inspected, filtered, and governed securely, reliably, and at scale for enterprise customers across VPCs, hybrid networks, and multi-account organizations. The role involves designing and building new solutions, threat detection models, and advanced protections in collaboration with internal and external stakeholders.

Responsibilities

• Work across the entire stack—control plane, data plane, API surfaces, and deep integrations with Route 53 Resolver, VPC networking, Private Link, AWS RAM, AWS Firewall Manager, and AWS Organizations.
• Design and build advanced detection features, enhance configurability for customers, and architect next-generation protections, including agentic attack prevention capabilities.
• Drive system architecture and spearhead best practices to enable a high-quality product.
• Coach and develop junior engineers.
• Investigate DNS threat patterns to improve detection accuracy, prototype new filtering capabilities, and instrument code to report security metrics.
• Collaborate with partner teams on integration designs and develop features for centralized profile management.
• Draft proposals for new agentic protection capabilities.

About the team

This team designs, builds, and operates the high-availability, enterprise-scale DNS Firewall service along with Route 53 Profiles. DNS Firewall provides DNS-layer protection using models developed in-house and through partnerships with major DNS security providers. Route 53 Profiles enables customers to apply DNS-related configurations—such as Resolver rules, DNS Firewall rule groups, and private hosted zone associations—across multiple VPCs with a single, shareable configuration.

Together, these services form a critical part of AWS's network security and governance, serving customers from startups to the largest enterprises.

Qualifications

Basic Qualifications

• 3+ years of non-internship professional software development experience.
• 2+ years of non-internship design or architecture experience (design patterns, reliability, and scaling) of new and existing systems.
• Experience programming with at least one software programming language.

Preferred Qualifications

• 3+ years of full software development life cycle experience, including coding standards, code reviews, source control management, build processes, testing, and operations.
• Bachelor's degree in computer science or equivalent.

Pay

Base salary range: $143,700 - $194,400 USD annually.

Benefits

• Sign-on payments and restricted stock units (RSUs).
• Comprehensive health insurance (medical, dental, vision, prescription, Basic Life & AD&D, and optional supplemental life plans).
• Employee Assistance Program (EAP) and mental health support.
• Medical Advice Line and Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.

Learn more about benefits at amazon.jobs/en/benefits.