Software Development Engineer II (UM), Bespoke Solutions

Application deadline: Jul 25, 2026 Bespoke Solutions is seeking a Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for managing large-scale fleets of embedded devices across highly secure and enterprise network environments. This is a unique opportunity to work at the intersection of distributed systems, security engineering, and fleet operations — building infrastructure that must meet the highest standards of reliability, integrity, and compliance. We develop AWS owned hardware & software solutions in order to scale globally, minimize cost, and maximize value for our customers. We are a growing team of hardware, software and FPGA engineers with a dedicated product development lab. If Arlington, VA (Arlington HQ): This role will sit in our new headquarters in Northern Virginia, where Amazon will invest $2.5 billion dollars, occupy 4 million square feet of energy efficient office space, and create at least 25,000 new full-time jobs. Our employees and the neighboring community will also benefit from the associated investments from the Commonwealth including infrastructure updates, public transportation improvements, and new access to Reagan National Airport. By working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us. This position requires that the candidate selected must be a US Citizen and currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work. 10012 Key job responsibilities - Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments - Implement multi-tenant data isolation using attribute-based access control (ABAC), row-level security, and transparent query rewriting — designed to scale from single-tenant to hundreds of tenants over a 5-year horizon - Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging - Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails - Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries - Design reconciliation protocols where edge devices remain the recommended source of truth, with backend systems maintaining synchronized projections A day in the life You'll be building the backbone of a platform that securely manages thousands of embedded devices in some of the most demanding operational environments. Your work will directly impact fleet reliability, security posture, and operational efficiency at scale — solving problems that few engineers ever get to tackle.

About AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Why AWS? Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge-sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects that help our team members develop your engineering expertise so you feel empowered to take on more complex tasks in the future. AWS Infrastructure Services (AIS) AWS