Systems Development Engineer, Amazon Foundational Security Services

About the role

Amazon Foundational Security Services (AFSS) owns the service portfolio that provides enterprise capabilities for authentication, authorization, directory management, and public key infrastructure (PKI). This includes Amazon’s on-premises Active Directory, the enterprise Azure Active Directory (Entra ID) tenant, and the Corporate PKI Service. We work very closely with additional Cloud IDPs, including Google Workspace and AWS Identity Center (IDC).

As a Systems Development Engineer, you will design, build, and operate scalable solutions at the intersection of Identity and Access Management (IAM), spanning both Amazon-native and Microsoft Entra ID tooling. You will partner with experienced engineers to drive improvements to our technology stack, maintain high-availability services, and build observability through metrics and monitoring. Your work will directly support automated systems that anticipate and resolve customer issues—delivering a seamless, self-service experience. You will collaborate with business partners, leadership, and cross-functional engineering teams to influence technical direction and build resilient, secure systems.

Responsibilities

• Maintain the IAM (Identity and Access Management) infrastructure at Amazon, leveraging Microsoft Entra ID to manage Amazonian identity and access globally.
• Manage and drive secure configuration and features in IAM, with AWS technology at the forefront.
• Diagnose and resolve production issues, develop monitoring solutions for IAM services, and perform software maintenance and configuration.
• Implement fixes for internally developed code (Microsoft DSC, Graph API, SCIM, Python, Java), debug and execute persistence solution queries, and track and resolve technical challenges.
• Build new IAM solutions to support evolving customer needs.
• Collaborate with development teams on Amazon Corporate and Divisional Software projects, enhancing current software and automating support processes.
• Document systems and solutions to ensure knowledge continuity.
• Manage AFSS org-level operational cadence and programs.
• Participate in on-call rotations and incident response as needed.

Export Control Requirement

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Basic Qualifications

• Experience in automating, deploying, and supporting infrastructure.
• Experience programming with at least one modern language such as Python, Ruby, Golang, Java, C++, C#, Rust.
• Experience with Linux/Unix.

Preferred Qualifications

• Experience with CI/CD pipelines build processes.