Identity & Access Security Engineer - Flexible Hours

Amazon; Dallas (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon is seeking a Security Engineer to safeguard authentication and authorization across Stores, Digital, and Other (SDO) units. You will drive secure design reviews, implement automated audits, and develop identity lifecycle policies.

You will collaborate with BSTs, deploy authentication configurations, and work with FIDO2, Kerberos, SSO, OAuth, OpenID Connect, and SAML to strengthen identity security at scale.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Responsibilities

• Protect and secure Amazon authentication and authorization workflows across Stores, Digital, and Other (SDO) business units
• Participate in architectural reviews, threat models, and secure design consultations for identity systems
• Implement and maintain automated security audits (SAST/DAST) to ensure identity workflows adhere to security standards
• Develop policies, procedures, and guidance for the identity lifecycle (provisioning, authentication, authorization, deprovisioning)
• Collaborate with Business Security Teams (BSTs) to deploy and validate authentication configurations for Amazon-owned endpoints
• Create and maintain scripts to automate reporting and security operations across various IAM technologies
• Work with technologies such as FIDO2/WebAuthn, Kerberos, Single Sign-On, Passwordless Authentication, OAuth 2.0, OpenID Connect, and SAML
• Analyze, troubleshoot, investigate, and remediate identity security events
• Collect and analyze data to drive security decisions and communicate findings to peer teams and leadership

Skills

Programming languages

Scripting

Troubleshooting

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Job description

Amazon is seeking a Security Engineer to safeguard authentication and authorization across Stores, Digital, and Other (SDO) units. You will drive secure design reviews, implement automated audits, and develop identity lifecycle policies.

You will collaborate with BSTs, deploy authentication configurations, and work with FIDO2, Kerberos, SSO, OAuth, OpenID Connect, and SAML to strengthen identity security at scale.