Principal WW Specialist SA, Data Protection, AWS WWSO Security Services

Amazon • Chicago, IL

23h • Remote

About The Position

This position is part of the AWS Specialist and Partner Organization (ASP). Specialists own the end-to-end go-to-market strategy for their respective technology domains, providing the business and technical expertise to help our customers succeed. Partner teams own the strategy, recruiting, development, and growth of our key technology and consulting partners. Together they provide our customers with the expertise and scale needed to build innovative solutions for their most complex challenges.

AWS Specialist Solutions Architects (SSAs) are technologists with deep domain-specific expertise in critical security domains. As part of the AWS sales organization, SSAs work with customers facing complex data protection challenges that require expert-level knowledge to solve. SSAs craft secure, scalable, and resilient technical architectures that address these challenges while maintaining the highest security standards. Do you enjoy solving novel and unique technical challenges for customers? Become an AWS Specialist SA!

Customers trust AWS with their most sensitive workloads, and data protection is where that trust is built. Whether they are managing encryption across thousands of accounts, migrating to new cryptographic standards, or extending security controls into generative AI and agentic architectures, they need expert guidance to do it confidently and at scale. This role exists to provide that guidance.

As a Principal Specialist Solutions Architect for Data Protection, you will lead complex customer engagements across encryption, key management, secrets management, and certificate services at scale. You will develop and scale technical expertise across the AWS field community, and work closely with AWS service teams to translate what you learn from customers into product improvements that make our data protection services better for everyone.
This position is part of the AWS Specialist and Partner Organization (ASP). Specialists own the end-to-end go-to-market strategy for their respective technology domains, providing the business and technical expertise to help our customers and partners succeed. Together, specialists and partners provide our customers with the expertise and scale needed to build innovative solutions for their most complex challenges.

Requirements

• Bachelor's degree in computer science, engineering, mathematics or equivalent
• Experience communicating across technical and non-technical audiences and at C-level, including training, workshops, publications
• 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience
• 6+ years of design, implementation, or consulting in applications and infrastructures experience
• 5+ years of data or data protection solution architecture experience

Nice To Haves

• Experience in design, implementation, support, and evaluation of security-focused tools and services
• Experience writing high-quality technical content for technical audiences (e.g., engineers, developers, scientists)
• Deep technical expertise with AWS KMS (key policies, grants, multi-region keys, key hierarchy design), AWS Private CA, and AWS Secrets Manager
• Experience with cryptographic architectures including HSM integration and certificate lifecycle management
• Familiarity with post-quantum cryptography standards and migration strategies
• Experience securing generative AI or agentic workloads, or a strong point of view on how data protection models need to evolve for AI-native architectures
• Experience with data sovereignty, compliance frameworks (FedRAMP, PCI DSS, HIPAA), and regulatory requirements related to encryption and key management
• Strong background in security architecture and AWS Well-Architected Framework

Responsibilities

• Lead complex data protection engagements with enterprise customers, guiding their adoption of AWS data protection services including AWS KMS, AWS Private CA, AWS Secrets Manager, AWS Payment Cryptography, and AWS CloudHSM
• Lead technical strategy for encryption and key management architectures, including hybrid, multi-cloud, and post-quantum cryptography migration planning
• Help customers secure their generative AI and agentic workloads by designing data protection architectures that maintain confidentiality, integrity, and access control as data flows through AI pipelines
• Amplify voice of the customer back to AWS data protection product teams, surface field patterns, identify gaps, and translate feedback into clear requirements that shape the roadmap
• Provide security expertise and support for customers implementing AI technologies, ensuring secure, compliant and trustworthy deployments
• Stay current with evolving AI security threats, post-quantum cryptography standards, and data sovereignty regulations to continuously improve guidance to customers
• Create and deliver internal/external training, workshops, and conference presentations on data protection best practices
• Collaborate with service teams, security specialists, and the Data Protection AWS community to capture and share technical insights at scale
• Author data protection best practices, reference architectures, and prescriptive guidance
• Build and maintain relationships with AWS Partners to design and deliver architectures that combine AWS-native data protection services with partner solutions
• Design and implement scalable programs and automation tools that amplify data protection best practices across the field

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave
• sign-on payments
• restricted stock units (RSUs)

What This Job Offers

• Job Type: Full-time
• Career Level: Principal