At Amazon Web Services Identity and Access Management (AWS IAM) we build, operate, and innovate the identity management, authentication, and authorization stack for the AWS cloud. Our mission is to push the technical boundaries to enable AWS customers to run their business workloads confidently and securely. As part of this mission, we Think Big and Dive Deep as we leverage technology to give customers state-of-the-art controls to manage access across all their AWS environments. At IAM, we operate one of the largest distributed systems in the world, which processes tens of millions of transactions per second.
With the growth of AWS, the customer workloads and access patterns keep evolving, demanding the next order of magnitude scalability. We are looking for a strong Senior Software Engineer to join the team that can own and operate the IAM Control Plane ecosystem of services.


Key job responsibilities
A successful candidate has established background in designing, building and operating high-performing, reliable distributed systems of the global scale as part of a high-functioning engineering team.
You must have strong technical skills, solid project management skills, be an efficient communicator and have motivation, vision and high judgement to stay focused on key business outcomes to deliver results in a fast-paced environment. IAM is a highly technical space with emphasis on security, scale and operational excellence. You will be expected to be a strong technical leader who effectively partners with others, keeps the big picture in sight, informs prioritization, builds consensus and rallies the team behind it. Core responsibilities include design and implementation of complex system components while maintaining an uncompromising bar on quality and supporting less experienced members of the team in growing in their craft.

About the team
This particular team is called the IAM Control Plane Security team. This team's mission is to make sure secure the IAM Control Plane offers state-of-the-art but secure controls. Over the years, as customer requirements have evolved, we've created many complex relationships between these access control entities. Making sure that customers do not configure these in an insecure way. That the behavior and interactions between these controls is well-understood, predictable and consistent. This involves conducting frequent pen tests, addressing findings, responding to high-severity, high visibility incidents, creating and implementing a proactive security strategy.