Software Development Manager, AWS Identity, Access Analyzer

Amazon Web Services (AWS)

Santa Clara (CA)

On-site

USD 213,000 - 288,000

Full time

15 hours ago
Be an early applicant
Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Amazon Web Services (AWS) is seeking an experienced Software Development Manager to lead the Citadel team within IAM. You will guide a group building a scalable internal access analysis platform that evaluates IAM policies at massive scale, surfacing security findings for AWS customers.

The role balances distributed systems and automated reasoning, with a focus on reliability, customer outcomes, and security-by-default practices across enterprise environments.

Qualifications

  • 3+ years of engineering team management experience.
  • 7+ years working directly within engineering teams.
  • 3+ years designing or architecting (design patterns, reliability and scaling) of new and existing systems.
  • 8+ years of leading the definition and development of multi-tier web services.
  • Knowledge of engineering practices and patterns across the full software lifecycle.
  • Experience partnering with product or program management teams.

Responsibilities

  • Define and execute the product and architecture strategy for large-scale access analysis.
  • Drive customer-facing impact by addressing enterprise security needs and remediation workflows.
  • Own system reliability, scalability, and operational metrics for services processing billions of policy evaluations.
  • Build integrations with internal platforms to expand coverage and deliver findings to customers.
  • Identify risks early and elevate to senior leadership when needed.
  • Set team strategy and ensure delivery of high-quality outcomes.
  • Collaborate with product management, solutions architects, and AWS service teams.

Skills

Engineering management
Senior engineering
System design
Multi-tier web services
Product/PM collaboration
Operational excellence

Job description

Description

How do you help every AWS customer understand who can access what, and why, across billions of resource configurations? That's the challenge at the core of this role.

Description

How do you help every AWS customer understand who can access what, and why, across billions of resource configurations? That's the challenge at the core of this role.

As a Software Development Manager on the AWS IAM Access Analyzer team, you'll lead a team building the next-generation internal access analysis platform that evaluates IAM policies at massive scale to surface security findings for AWS customers. Your systems power automated reasoning about permissions, resource configurations, and access patterns, helping customers identify overly permissive access and unused credentials before they become security incidents.

This is a deeply technical team operating at the intersection of distributed systems, automated reasoning, and cloud security. The ideal candidate sets a high engineering bar, drives operational excellence across tier-0 infrastructure, and works backwards from customer needs to deliver meaningful security outcomes. If you're passionate about building systems that make the cloud more secure by default, this is the role for you.

Key job responsibilities
  • Define and execute the product and architecture strategy for large-scale access analysis, including finding generation, resource configuration ingestion, and cost estimation
  • Drive customer-facing impact by working backwards from enterprise customer needs (financial services, large tech companies) to simplify how they discover and remediate security risks
  • Own system reliability, scalability, and operational metrics for services that process billions of policy evaluations across AWS accounts
  • Build and maintain integrations with internal platforms (Trellis, EventBridge, Config) to expand coverage and deliver findings to customers through multiple channels
  • Proactively identify risks, mitigate them before they become roadblocks, and exercise sound judgment on when and how to elevate to senior leadership
  • Set team strategy and be accountable for team plans, execution, and deliverables, ensuring consistent, high-quality outcomes
  • Collaborate cross-functionally with product management, solutions architects, and AWS service teams to align on priorities and drive adoption
  • Leverage AI tooling to improve engineering productivity, automate workflows, and raise the bar on operational efficiency
  • Grow and develop a strong, healthy, and diverse team through strategic hiring, mentoring, and coaching
About The Team

The Citadel team sits within AWS Identity and Access Management (IAM), building the next-generation internal access analysis platform. We help AWS customers continuously evaluate their IAM policies and resource configurations to identify overly permissive access, unused credentials, and potential security risks at scale. Our work combines distributed systems engineering with automated reasoning to deliver security insights that protect millions of AWS accounts. We value strong ownership, operational rigor, and a culture of working backwards from customer outcomes.

Basic Qualifications
  • 3+ years of engineering team management experience
  • 7+ years of working directly within engineering teams experience
  • 3+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience
  • 8+ years of leading the definition and development of multi tier web services experience
  • Knowledge of engineering practices and patterns for the full software/hardware/networks development life cycle, including coding standards, code reviews, source control management, build processes, testing, certification, and livesite operations
  • Experience partnering with product or program management teams
Preferred Qualifications
  • Experience in communicating with users, other technical teams, and senior leadership to collect requirements, describe software product features, technical designs, and product strategy
  • Experience in recruiting, hiring, mentoring/coaching and managing teams of Software Engineers to improve their skills, and make them more effective, product software engineers

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, Santa Clara - 212,700.00 - 287,700.00 USD annually

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Software Development Manager, AWS Identity, Access Analyzer
Software Development Manager, AWS Identity, Access Analyzer

Socket.dev • Santa Clara (CA)

On-site
USD 213,000 - 288,000
Senior Software Development Engineer, AWS Identity and Access Management
Senior Software Development Engineer, AWS Identity and Access Management

Amazon Web Services (AWS) • Seattle (WA)

On-site
USD 168,000 - 227,000
Health insurance
401(k) matching
Paid time off
+1
Senior Software Development Manager , Access Management Services
Senior Software Development Manager , Access Management Services

Amazon • San Diego (CA)

On-site
USD 220,000 - 298,000
Senior Software Development Engineer, AWS IAM Data Plane, AWS Identity & Access Management - Da[...]
Senior Software Development Engineer, AWS IAM Data Plane, AWS Identity & Access Management - Da[...]

Amazon Web Services (AWS) • Denver (CO)

On-site
USD 168,000 - 227,000
Principal Product Manager, AWS Identity and Access Management
Principal Product Manager, AWS Identity and Access Management

Amazon • Seattle (WA)

On-site
USD 181,100 - 245,000
Health insurance
401(k) matching
Paid time off
+1
Sr. Technical Program Manager, IAM Identity Center (AWS)
Sr. Technical Program Manager, IAM Identity Center (AWS)

Amazon • Seattle (WA)

On-site
USD 149,000 - 201,000
Sr. Security Services SA, AWS Industries - Customer Acceleration Team - Security Specialists
Sr. Security Services SA, AWS Industries - Customer Acceleration Team - Security Specialists

Amazon Web Services (AWS) • Seattle (WA)

On-site
USD 177,000 - 239,000
Sr. Security Services SA, AWS Industries - Customer Acceleration Team - Security Specialists
Sr. Security Services SA, AWS Industries - Customer Acceleration Team - Security Specialists

Amazon Web Services (AWS) • Chicago (IL)

On-site
USD 177,000 - 239,000
Sr. Product Marketing Manager - Tech, Security and Identity PMM
Sr. Product Marketing Manager - Tech, Security and Identity PMM

Amazon Web Services (AWS) • Seattle (WA)

On-site
USD 147,000 - 199,000
Sr. Security Services SA, AWS Industries - Customer Acceleration Team - Security Specialists
Sr. Security Services SA, AWS Industries - Customer Acceleration Team - Security Specialists

Amazon Web Services (AWS) • San Francisco (CA)

On-site
USD 177,000 - 239,000