AWS Sr. Security Engineer - IAM, Amazon Foundational Security Services (AFSS)

DescriptionWe are open to hiring candidates to work out of one of the following locations:Seattle, WA, USAAmazon Foundational Security Services (AFSS) is a high visibility team that solves security challenges at a massive scale. We are looking for a Security Engineers who are ready to take on a front-line role in addressing security issues across the largest cloud provider in the world. Security issues at this scale and speed require a passion for engineering robust solutions to complex security challenges, as well as the ability to quickly design and build internal tools to address them.AFSS is looking for Security Engineers to ensure that our internal Identity And access Management infrastructure operates to the highest security standards required to maintain and enhance internal and external customer trust. If you enjoy analyzing, envisioning, and architecting secure enterprise systems (e.g., Exchange, M365), cloud productivity applications, and identity and access management systems (such as Active Directory, Entra ID), and you are skilled at investigating security issues and new threat scenarios, this position will provide you with a challenging opportunity to work alongside world-class talent in solving complex and far-reaching problems. A successful candidate will have a deep knowledge of Identity and Access Management Systems such as Active Directory and Azure AD. They should be able to understand the system configurations and security risks, as well as the deeper details of the product.Key job responsibilitiesWork in tandem with internal Amazon and AWS service teams to improve internal and external services.Respond to related security consultations and inquiries.Influence service teams across Amazon to develop systems and processes with security best practices.Attend internal and external training regarding security engineering and architecture.Support large-scale security incident investigations, participate in or lead post-mortem analyses.Design and create new service architectures along with internal and external service teams.Build and Operate security-related services for internal customers.Develop and mentor other security engineers.A day in the lifeWe are looking for a highly curious security and systems professionals to join us and help us continue to raise the security bar for our identity and access management infrastructure. On a day-to-day basis, you will be part of a world-class team in a fast-paced environment that has the entrepreneurial feel of a start-up. You will be working to define the security standard and controls for the systems owned by the team, work with the engineering systems and teams to ensure these standards and controls are deployed effectively and are managed on a massive scale. You'll be surrounded by people who are smart, passionate about cloud computing, and believe that world-class service is critical to customer success. You will be working with other partner security teams, ensuring that security standards and controls managed in the team are aligned with the broader security standards set inside Amazon. You will be advocating on behalf of the team while talking to vendors in situations their solutions are not meeting our own standards.Our team works with the numerous Amazon groups to solve security challenges at massive scale relating to identity and access management. We enable trust by building internal services that meet the security goals of our customers, from compliance to analysis. We dive deep into security technologies such as new authentication systems, hardware security components, cryptography, system hardening, and massive-scale audit analysis.About the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.Basic QualificationsBS degree in Computer Science, Computer Engineering, Electrical Engineering, similar technology degrees or 8+ years’ equivalent technology experience.2+ years of experience in a security engineering or architecture role.Preferred QualificationsA strong sense of ownership, urgency, drive, and delivery.MS in Computer Science, Networking, Information Systems, Computer Engineering, Systems Engineering, similar technology degress, or 10+ years’ equivalent experience.Proven experience with security architecture, system architecture, threat modeling, incident handling/response, reverse engineering, malware analysis, adversary methodologies, and/or threat intelligence.Comprehension of cryptographic algorithms and practical usage.Deep knowledge of Windows, Linux, MacOS, Android, and iOS client operating systems and associated management and security tooling.Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit This position will remain posted until filled. Applicants should apply via our internal or external career site.