Identity Services Software Engineer – Authentication & Security

Amazon; Seattle (WA); On-site; USD 144,000 - 194,000; Full time

Benefits offered by this job

Health insurance

RSUs

Sign-on payments

401(k) matching

Paid time off

Parental leave

Job summary

Amazon is seeking a Software Development Engineer for Identity Services in Seattle, WA. You will design and implement secure authentication and session management systems serving millions of customers across web, mobile, and devices.

The role focuses on delivering sub-10ms latency in high-availability services, balancing security with user experience, and collaborating with security teams to prevent threats while managing token creation, validation, and invalidation.

Qualifications

• 3+ years of design or architecture experience in large-scale systems.
• Experience debugging, profiling, and applying best software engineering practices.
• Experience programming with at least one programming language.

Responsibilities

• Design and implement secure authentication and authorization systems using bearer token schemes and session management protocols.
• Build and maintain high-performance validation services with sub-10ms latency.
• Develop intelligent authentication systems balancing security with user experience to reduce re-authentication friction.
• Implement security features including token binding, risk evaluation, and fraud detection mechanisms.
• Collaborate with security teams to detect and prevent account takeover attempts and cookie theft.
• Work on token lifecycle management including creation, validation, exchange, and invalidation across platforms.

Skills

System design

Debugging

Programming

Job description

Amazon is seeking a Software Development Engineer for Identity Services in Seattle, WA. You will design and implement secure authentication and session management systems serving millions of customers across web, mobile, and devices.

The role focuses on delivering sub-10ms latency in high-availability services, balancing security with user experience, and collaborating with security teams to prevent threats while managing token creation, validation, and invalidation.