Systems Development Engineer, Amazon Foundational Security Services

Amazon Foundational Security Services (AFSS) owns the service portfolio that provides enterprise capabilities for authentication, authorization, directory management, and public key infrastructure (PKI). This includes Amazon's on-premises Active Directory, the enterprise Azure Active Directory (Entra ID) tenant, and the Corporate PKI Service. We work very closely with additional Cloud IDPs, including Google Workspace and AWS Identity Center (IDC). We enable the authentication and authorization needs of every Amazonian: logging into their laptops, authenticating to enterprise services like Exchange, SharePoint, and Microsoft 365, and authorizing access to shared resources such as GitFarm, wiki pages, and Workdocs. As a Systems Development Engineer , you will design, build, and operate scalable solutions at the intersection of Identity and Access Management (IAM), spanning both Amazon-native and Microsoft Entra ID tooling. You will partner with experienced engineers to drive improvements to our technology stack, maintain high-availability services, and build observability through metrics and monitoring. Your work will directly support automated systems that anticipate and resolve customer issues - delivering a seamless, self-service experience. You will collaborate with business partners, leadership, and cross-functional engineering teams to influence technical direction and build resilient, secure systems. Key job responsibilities Primary responsibilities include maintaining the IAM (Identity and Access Management) infrastructure at Amazon. We leverage Microsoft Entra ID to manage Amazonian identity and access globally. The candidate is expected to manage and drive secure configuration and features in IAM, with AWS technology at the forefront. • Diagnose and resolve production issues, develop monitoring solutions for IAM services, and perform software maintenance and configuration. • Implement fixes for internally developed code (Microsoft DSC, Graph API, SCIM, Python, Java), debug and execute persistence solution queries, and track and resolve technical challenges. • Build new IAM solutions to support evolving customer needs. • Collaborate with development teams on Amazon Corporate and Divisional Software projects, enhancing current software and automating support processes. • Document systems and solutions to ensure knowledge continuity. • Manage AFSS org-level operational cadence and programs. • Participate in on-call rotations and incident response as needed.

Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life