This position requires that the candidate selected must be a US Citizen and currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work.
10012
Key job responsibilities
Architect and develop a decomposed, microservices-based platform comprising independently deployable and horizontally scalable subsystems (fleet management, rule execution, device communication, logging, security, and presentation layers)
Design and implement secure inter-service communication across both control plane (REST/mTLS) and high-throughput data plane (streaming) protocol surfaces
Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments
Implement multi-tenant data isolation using attribute-based access control (ABAC), row-level security, and transparent query rewriting — designed to scale from single-tenant to hundreds of tenants over a 5-year horizon
Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging
Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails
Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries
Design reconciliation protocols where edge devices remain the recommended source of truth, with backend systems maintaining synchronized projections
A day in the life
You'll be building the backbone of a platform that securely manages thousands of embedded devices in some of the most demanding operational environments. Your work will directly impact fleet reliability, security posture, and operational efficiency at scale — solving problems that few engineers ever get to tackle.
About the team
About AWS
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
Why AWS?
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge-sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects that help our team members develop your engineering expertise so you feel empowered to take on more complex tasks in the future.
AWS Infrastructure Services (AIS)
AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help.
Diverse Experiences
AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
Mentorship & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.
7+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience
5+ years of non-internship professional software development experience
5+ years of programming with at least one software programming language experience
Experience as a mentor, tech lead or leading an engineering team
Strong background in security-hardened system design, including PKI, mutual TLS, and cryptographic signing
Proficiency with PostgreSQL or similar relational databases, including row-level security and policy-based access control
Current, active US Government Security Clearance of Top Secret with SCI eligibility or above
Bachelor's degree in computer science or equivalent
10+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
Experience operating systems in air-gapped, classified, or FedRAMP/IL5+ environments
Experience implementing ABAC/RBAC authorization models with dynamic policy evaluation
Background in embedded device fleet management or IoT platforms at scale
Knowledge of FIPS-validated cryptographic modules and NIST-approved algorithms
Familiarity with Merkle trees, blockchain-based audit logs, or other tamper-evident data structures
Current, active US Government Security Clearance of TS/SCI with Polygraph
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, CO, Denver - 168,100.00 - 227,400.00 USD annually
USA, MD, Jessup - 168,100.00 - 227,400.00 USD annually
USA, VA, Arlington - 168,100.00 - 227,400.00 USD annually
USA, VA, Herndon - 168,100.00 - 227,400.00 USD annually
