Systems Development Manager, Identity, Amazon Foundational Security Services

Amazon • Seattle, WA

1d

About The Position

Amazon Foundational Security Services (AFSS) is seeking a Systems Development
Engineer to join our Identity and Access Management team, where you'll build and
maintain the automation and infrastructure that powers Amazon's Microsoft Entra
ID environment at unprecedented scale. In this role, you'll own the end-to-end
application registration, approval, and deployment process, manage conditional
access policies across multiple tenants, and develop configuration-as-code
frameworks that enable hundreds of thousands of users to securely access
Microsoft 365, Azure, and integrated cloud services worldwide.

As a Systems Development Engineer, you'll design and implement the systems that
handle application registration workflows from request through approval to
deployment, ensuring secure and compliant integrations with Entra ID. You'll
manage conditional access policy lifecycles including creation, testing,
deployment, and ongoing maintenance across enterprise tenants, build
infrastructure-as-code solutions for deploying identity configurations with
version control and automated testing, and develop self-service portals that
streamline app registration requests while maintaining security standards. Your
work will include implementing automated approval workflows, managing service
principal lifecycles, handling API permission grants and certificate management,
and creating observability platforms that provide real-time visibility into
registration status, policy enforcement, and tenant health.

You'll collaborate with business leaders and service teams to understand their
Azure and Entra integration requirements, guide them through the app
registration and approval process, and build secure solutions that meet their
needs while maintaining compliance with security policies. You'll work closely
with application teams to troubleshoot integration issues, refine conditional
access policies based on business requirements, and partner with infrastructure
teams to ensure identity services meet strict security and availability SLAs.
This is a high-impact opportunity where you'll build systems that directly
impact thousands of developers and teams company-wide, working with massive data
sets and seeing all aspects of the Amazon business—from Retail websites to
digital products to the inner workings of Amazon Web Services.

Requirements

• 3+ years of systems engineering and operations leadership for an Internet service or leading edge IT organization experience
• 5+ years of managing system or software development teams experience
• Bachelor's degree in Computer Science, Engineering, Mathematics, or a related field
• Experience in systems engineering and operations leadership for an Internet service or leading-edge IT organization

Nice To Haves

• Knowledge of professional software engineering & best practices for full software development life cycle, including coding standards, software architectures, code reviews, source control management, continuous deployments, testing, and operational excellence
• Knowledge of systems engineering fundamentals (networking, storage, operating systems)
• Experience with Agile engineering practices (Kanban, continuous delivery, etc.)
• Experience with AWS platforms, services, and design patterns

Responsibilities

• Design and implement end-to-end application registration, approval, and deployment workflows for Entra ID, including service principal creation, API permission grants, and certificate management
• Manage conditional access policy lifecycles across multiple tenants using configuration-as-code frameworks, including policy creation, testing, deployment, and ongoing maintenance
• Build self-service automation and portals that streamline app registration requests while maintaining security standards, approval workflows, and audit trails
• Develop CI/CD pipelines and infrastructure-as-code solutions for deploying identity configurations with automated testing, validation, and consistent security baselines
• Collaborate with business leaders and service teams to build secure Azure and Entra integrations, guide them through registration processes, and create observability platforms for tenant health monitoring

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level