Configure and manage M365 services (Teams, SharePoint, OneDrive, Exchange) via Desired State Configuration (DSC)
Enforce compliance with security principles including least-privilege access, password management, and audit logging for all productivity applications
Partner with Leo Security and Global Trade Compliance to ensure compliance with ITAR/EAR export control requirements and NIST SP 800-53 controls
Build automation frameworks and monitoring dashboards using PowerShell and Python to drive operational excellence and scalability
Drive secure external collaboration solutions to support Kuiper program requirements
Develop and maintain runbooks and engineering documentation for both technical audiences and end users
Create and implement automated processes that reduce manual effort and increase overall efficiency
Work closely with cross-functional teams including KIAM, Leo Security, and program planning to meet infrastructure and compliance requirements
Export Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.
A day in the life
As a Systems Development Engineer on the ALM365 team, you'll implement and maintain Microsoft 365 services and SharePoint Server on AWS GovCloud. You'll write PowerShell automation and CDK infrastructure code, respond to operational alarms, partner with Leo Security on compliance controls, and collaborate across team boundaries to support Amazon Leo's productivity platform — balancing hands-on engineering with export control and security requirements.
About the team
The ALM365 team owns Amazon Leo's productivity infrastructure — Microsoft 365 (Teams, SharePoint, Exchange, OneDrive), Nextcloud, SharePoint/Project Server on AWS GovCloud, and secure external collaboration services. We operate across two classified environments (KCE-Low and KCE-Mod) and partner closely with Leo Security, KIAM, and program planning to deliver compliant, highly-available collaboration tools for a satellite broadband program subject to ITAR/EAR export controls. Small team, high ownership, meaningful infrastructure work.
Experience in automating, deploying, and supporting large-scale infrastructure
Experience programming with at least one modern language such as Python, Ruby, Golang, Java, C++, C#, Rust
Experience with PowerShell (preferred), Python, Ruby, or Java
Experience with CI/CD pipelines build processes
Experience utilizing AWS cloud solutions in a DevOps environment
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Bellevue - 129,200.00 - 174,800.00 USD annually
