IAM Security Engineer: Identity & Access at Scale

Amazon; Dallas (TX); Vor Ort; USD 159.000 - 202.000; Vollzeit

Zusammenfassung

Amazon's Identity and Access Management (IAM) Security team is seeking a Security Engineer to strengthen authentication and authorization across Amazon's Stores, Digital, and Other (SDO) organizations.

You will review threat models, conduct security code reviews of identity protocols (OAuth, SAML, OIDC), develop Python scripts to automate audits, and collaborate with business teams on passwordless authentication, FIDO2, and SSO deployments.

Qualifikationen

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Aufgaben

• Reviewing threat models for new authentication flows and recommending mitigations to service teams
• Conducting security code reviews on identity protocol implementations (OAuth, SAML, OIDC)
• Writing and maintaining Python scripts to automate security audits and generate compliance reports
• Consulting with business teams on passwordless authentication, FIDO2, and SSO deployments
• Analyzing alerts from detection tools and investigating identity security events
• Communicating findings and security recommendations to stakeholders and leadership

Kenntnisse

Python

Security code review

Threat modeling

OAuth

SAML

OIDC

Network protocols

Troubleshooting

Bachelor's degree in CS

Ausbildung

Bachelor's degree in computer science or equivalent

Tools

AWS

Jobbeschreibung

Amazon's Identity and Access Management (IAM) Security team is seeking a Security Engineer to strengthen authentication and authorization across Amazon's Stores, Digital, and Other (SDO) organizations.

You will review threat models, conduct security code reviews of identity protocols (OAuth, SAML, OIDC), develop Python scripts to automate audits, and collaborate with business teams on passwordless authentication, FIDO2, and SSO deployments.