Software Development Engineer, Identity Services

Amazon; Seattle (WA); On-site; USD 144,000 - 194,000; Full time

Benefits offered by this job

Health insurance

RSUs

Sign-on payments

401(k) matching

Paid time off

Parental leave

Job summary

Amazon is seeking a Software Development Engineer for Identity Services in Seattle, WA. You will design and implement secure authentication and session management systems serving millions of customers across web, mobile, and devices.

The role focuses on delivering sub-10ms latency in high-availability services, balancing security with user experience, and collaborating with security teams to prevent threats while managing token creation, validation, and invalidation.

Qualifications

• 3+ years of design or architecture experience in large-scale systems.
• Experience debugging, profiling, and applying best software engineering practices.
• Experience programming with at least one programming language.

Responsibilities

• Design and implement secure authentication and authorization systems using bearer token schemes and session management protocols.
• Build and maintain high-performance validation services with sub-10ms latency.
• Develop intelligent authentication systems balancing security with user experience to reduce re-authentication friction.
• Implement security features including token binding, risk evaluation, and fraud detection mechanisms.
• Collaborate with security teams to detect and prevent account takeover attempts and cookie theft.
• Work on token lifecycle management including creation, validation, exchange, and invalidation across platforms.

Skills

System design

Debugging

Programming

Job description

Software Development Engineer, Identity Services

Job ID: 10518441 | Amazon.com Services LLC

Identity Services are the guardians of Amazon's most sacred asset - customer trust! The stakes for us at Amazon have never been greater as Amazon expand more into customers' daily lives. We enable Amazon businesses to scale by providing secure authentication and authorization solutions in the most possible friction-less manner. We are moving towards the vision where our clients no longer have to choose between sophisticated security and user convenience. Our guiding principle for adaptive authentication is simple; if we suspect a risk in our multiple risk-layer checks, which run quietly in the background, we will deploy the most secure and appropriate available solution, and if we do not, we will let the customer use Amazon unimpeded.

We're seeking a Software Engineer to join our Identity Services team, responsible for authentication and session management systems that serve millions of customers across web, mobile, and device platforms.

Key job responsibilities

• * Design and implement secure authentication and authorization systems using bearer token schemes and session management protocols
• * Build and maintain high-performance validation services with strict latency requirements (sub-10ms response times)
• * Develop intelligent authentication systems that balance security with user experience, reducing unnecessary re-authentication friction
• * Implement security features including token binding, risk evaluation, and fraud detection mechanisms
• * Collaborate with security teams to detect and prevent account takeover attempts and cookie theft
• * Work on token lifecycle management including creation, validation, exchange, and invalidation across multiple platforms

About the team

AuthZero is the team responsible for authentication and session management across Amazon's platform. We own critical services including Aztec Service for token management and work closely with the Session Service team. Our systems handle token creation, validation, exchange, and invalidation for web, mobile apps, devices, and Login with Amazon (LWA). We're at the forefront of reducing authentication friction through Intelligent Authentication while maintaining robust security. The team tackles complex challenges including cookie theft detection, risk-based authentication, and building scalable systems that process authentication requests with sub-10ms latency at massive scale.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

Basic Qualifications

• - 3+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience
• - Experience debugging, profiling, and implementing best software engineering practices in large-scale systems
• - Experience programming with at least one software programming language, or experience (non-internship) in professional software development

Preferred Qualifications

• - Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
• - Experience working with high-availability, distributed systems and services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn’t listed, please contact your Recruiting Partner.

Preferred Qualifications

• - Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
• - Experience working with high-availability, distributed systems and services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.