Security Engineer, Identity and Access Management
Core
Design, implement, and secure identity and access management (IAM) systems at global scale for Amazon's Stores, Digital, and Other organizations.
Role type
Senior IC Security Engineer (Identity and Access Management)
Builds
Automated security audits, threat models, and secure authentication/authorization infrastructure
Domain
Cloud Security / Identity and Access Management
Deliverable
production ML models | product features | infrastructure
Required skills
Python programming, security code review, threat modeling, OAuth/SAML/OIDC protocols, log analysis, automation scripting, networking protocols (HTTP, DNS, TCP/IP)
Preferred skills
AWS services, cryptography, secure SDLC practices, system administration, network security
Technologies
Python, OAuth, SAML, OIDC, FIDO2, Kerberos, Single Sign-On, AWS
Responsibilities
Review threat models for new authentication flows, conduct security code reviews on identity protocols, write Python scripts for automated security audits, consult on passwordless authentication and SSO deployments, analyze security alerts and investigate events, communicate findings to stakeholders
Seniority
Senior, hands-on IC