Senior Distributed Systems Engineer – Fleet & Security

Amazon Web Services (AWS); Denver (CO); On-site; USD 168,000 - 227,000; Full time

Job summary

Amazon Development Center U.S., Inc. in Denver seeks a Senior Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for embedded devices in secure enterprise networks.

You will work at the intersection of distributed systems, security engineering, and fleet operations, delivering highly reliable infrastructure that meets strict compliance standards and security requirements.

Qualifications

• 7+ years of design/architecture leadership for large systems
• 5+ years of professional software development experience
• Experience as a mentor, tech lead or leading an engineering team
• Strong background in security-hardened system design, including PKI, mutual TLS, and cryptographic signing
• Proficiency with PostgreSQL or similar relational databases, including row-level security and policy-based access control
• Current, active US Government Security Clearance of Top Secret with SCI eligibility or above

Responsibilities

• Architect and develop a decomposed, microservices-based platform comprising independently deployable and horizontally scalable subsystems (fleet management, rule execution, device communication, logging, security, and presentation layers)
• Design and implement secure inter-service communication across both control plane (REST/mTLS) and high-throughput data plane (streaming) protocol surfaces
• Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments
• Implement multi-tenant data isolation using ABAC, row-level security, and transparent query rewriting — designed to scale from single-tenant to hundreds of tenants over a 5-year horizon
• Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging
• Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails
• Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries
• Design reconciliation protocols where edge devices remain the source of truth, with backend systems maintaining synchronized projections

Skills

Security design

PKI

Mutual TLS

Cryptographic signing

PostgreSQL

RBAC/ABAC

Leadership

Education

Bachelor's degree in Computer Science or equivalent

Job description

Amazon Development Center U.S., Inc. in Denver seeks a Senior Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for embedded devices in secure enterprise networks.

You will work at the intersection of distributed systems, security engineering, and fleet operations, delivering highly reliable infrastructure that meets strict compliance standards and security requirements.