Software Development Engineer II, Amazon Foundational Security Services

Company: Amazon
Location: Seattle
Posted on: April 3, 2026

Job Description:

Amazon Foundational Security Services (AFSS) is seeking a Software Development Engineer to join our Identity and Access Management team, where you'll transform how Amazon secures and manages its third-party cloud infrastructure at unprecedented scale. The Identity team owns a comprehensive suite of services that support Amazon's third-party cloud usage across Microsoft Entra, Google Cloud, and other cloud platforms, including identity lifecycle management, SCIM integration, user provisioning and deprovisioning, and enterprise authentication workflows. In this role, you'll design and implement event-driven architectures that process millions of identity events daily while maintaining strict security SLAs for hundreds of thousands of users across AWS native and third-party cloud applications worldwide. Beyond identity management, you'll be instrumental in implementing and operating cloud security posture management (CSPM) solutions for continuous vulnerability scanning across Amazon's multi-cloud environments (similar to platforms like Wiz and CrowdStrike). You'll build automation for configuration-as-code frameworks (similar to Desired State Configuration and AWS Config) to ensure compliance and security baselines, develop log ingestion pipelines that aggregate security telemetry from diverse cloud platforms, and create monitoring and observability frameworks that provide real-time visibility into our security posture. Your solutions will power critical workflows including single sign-on with Entra, identity synchronization via Entra Connect, Google Workspace integration, certificate lifecycle management, and real-time access control enforcement across all Amazon businesses and teams globally. You'll work with massive data sets, collaborate with business partners and leadership to influence product vision, and contribute to the design of systems that directly impact thousands of developers and teams company-wide. This is a high-impact opportunity where you'll see all aspects of the Amazon business—from Retail websites to digital products to the inner workings of Amazon Web Services—and your work will benefit both internal teams and Amazon's external customers. We're looking for a strong engineer with a background in third-party cloud identity systems, security tooling, and infrastructure automation, with experience designing and operating technology solutions across multiple cloud providers. Key job responsibilities Design and implement event-driven architectures for third-party cloud identity lifecycle management, including SCIM integrations with Microsoft Entra, Entra Connect synchronization, and Google Workspace provisioning that process millions of identity events Deploy and operate cloud security posture management (CSPM) solutions such as Wiz and CrowdStrike to perform continuous vulnerability scanning, threat detection, and compliance monitoring across multi-cloud environments Build configuration-as-code frameworks using Desired State Configuration, AWS Config, and infrastructure automation tools to enforce security baselines, maintain compliance requirements, and enable self-service security controls Develop log ingestion pipelines and observability platforms that aggregate security telemetry, identity events, and configuration data from Microsoft Entra, Google Cloud, AWS, and other third-party cloud platforms Collaborate with business partners, leadership, and engineering teams to support product vision, contribute to system design for identity and security services, diagnose and fix production issues, and participate in on-call rotations to maintain strict security SLAs A day in the life Your day is spent designing and building systems that secure Amazon's multi-cloud infrastructure at scale. You'll develop event-driven solutions for identity lifecycle management, implement SCIM integrations with Microsoft Entra and Google Workspace, and contribute to configuration-as-code frameworks that enforce security baselines. You'll build log ingestion pipelines aggregating security telemetry from diverse sources, support CSPM integration workflows for vulnerability scanning, and create automation for certificate lifecycle management. In design reviews, you'll collaborate with senior engineers on architectural decisions, write code, and translate business requirements into technical specifications that scale across multiple cloud providers. About the team Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. - 3 years of non-internship professional software development experience - 2 years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience - 1 years of designing and developing large-scale, multi-tiered, multi-threaded, embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl experience - Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics, or a related field - 3 years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience - Bachelor's degree in computer science or equivalent Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner. The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits . USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually

Keywords: Amazon, Redmond , Software Development Engineer II, Amazon Foundational Security Services, IT / Software / Systems , Seattle, Washington