The Senior Software Engineer will own and evolve LDAP based identity systems within AFSS Identity, focusing on architecture, lifecycle management, observability, and on-call mentorship across the authentication and identity stack.
Responsibilities
- Own the REGAL regionalized architecture, managing the read/write fleet split, Regal Replicator, and ORR to achieve full partition coverage.
- Oversee the 389DS software lifecycle, including upgrade trains, master fleet replication, and schema management across Commercial, GovCloud, ADC, China, and MVP environments.
- Develop pipeline driven automated region builds to remove manual steps during partition expansion.
- Lead schema evolution discipline by documenting each attribute and assessing consumer impact end to end before every change.
- Architect and advance the LDAP Read Proxy to support schema routed access, expansion to BRASS and additional backends, while remaining transparent to existing callers.
- Own GSAM as the system account control plane across LDAP, POSIX, and ANT, including lifecycle management, credential rotation, ANT auto provisioning, and progression toward passwordless system accounts.
- Own LDAP Time Machine and the Identity Data Lake, covering snapshot pipelines, S3 vending, cross region log analytics, and IdP security intelligence.
- Set an observability standard across direct, proxied, historical, and analytical access paths with consistent telemetry and uniform authorization.
- Serve as a Tier-1 on-call anchor for directory availability and replication health.
- Mentor engineers and raise the technical bar across both teams.
Requirements
- Five or more years of professional software development experience (non-internship).
- Five or more years of hands-on programming experience in at least one programming language.
- Five or more years leading design or architecture efforts, including design patterns, reliability, and scalability of new and existing systems.
- Experience mentoring others, serving as a tech lead, or leading an engineering team.
Technologies
- LDAP, 389DS LDAP, REGAL, Read Proxy, Time Machine, Identity Data Lake
- GSAM, ANT, IdP security intelligence
- S3, BRASS, POSIX, ORR
Compensation
Salary range: USD 168,100 to 227,400 per year.
Benefits
- Sign-on payments and restricted stock units (RSUs)
- Health insurance (medical, dental, vision, prescription)
- Basic Life and AD&D with options for supplemental life plans
- Employee Assistance Program (EAP) and mental health support
- Flexible Spending Accounts
- 401(k) matching
- Paid time off
- Parental leave
- Adoption and surrogacy reimbursement coverage
A Day in the Life
Begin by reviewing system metrics and addressing operational issues affecting Identity services. Throughout the day, collaborate with Identity and Access Management teams to design features, participate in architecture reviews for scalability improvements, and write high performance code to handle authentication and authorization requests. You will also mentor team members through code reviews and contribute to strategic planning for future identity features.
About the Team
Amazon Security values diverse experiences and welcomes candidates who may not meet every listed qualification. If your career path differs or is nontraditional, you are encouraged to apply. Early-career or nontraditional backgrounds are considered.
Why Amazon Security
Security is central to maintaining customer trust and delivering excellent experiences. The Security organization sets a high bar across Amazon products and services and offers opportunities to grow across areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
Learning and curiosity drive Amazon Security. Ongoing DEI events and learning experiences foster continual development and a celebration of diverse ideas, perspectives, and voices.
Training & Career Growth
We continuously raise our performance standards and provide abundant knowledge-sharing, training, and career-advancing resources to help you become a more well-rounded professional.
Work/Life Balance
We value work-life harmony with flexible work hours and arrangements, supporting you to succeed at work while maintaining home commitments.
