Sr. Security Engineer, Customer Service Identity and Access Management

Amazon.com Services LLC; Austin (TX); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Sign-on payments

RSUs

Health insurance (medical, dental, etc

401(k) matching

Paid time off

Parental leave

Job summary

Amazon is seeking a Senior Security Engineer to lead the security strategy for Customer Service Identity and Access Management (CSIAM). You will own the multi-year security direction and guide scalable authentication, authorization, and account management for workforce and customer access across service channels.

You will mentor engineers, communicate risk to executives, and align security with business roadmap.

Qualifications

• 5+ years of non-internship experience troubleshooting systems issues and automating complex tasks.
• 5+ years of experience identifying security issues and developing mitigation plans.
• 5+ years of non-internship scripting and programming with security code reviews.
• Experience mentoring or serving as a tech lead on engineering teams.
• Experience across multiple security domains: IAM, cloud, incident response, or web security.

Responsibilities

• Own the multi-year CSIAM security strategy and define technical direction.
• Lead design and delivery of authentication, authorization, and account management at scale.
• Refine authorization models for AI agents and agent interactions with customers.
• Act as senior technical leader and escalation point for complex security problems.
• Evaluate emerging security technologies to reduce tech debt and risk.

Skills

Troubleshooting

Security risk assessment

Scripting

Scala

Java

Python

C/C++

Go

Mentoring / tech lead

Security across multiple domains

Job description

Amazon is seeking a Senior Security Engineer to lead engineering and security strategy for Customer Service Identity and Access Management (CSIAM). In this role, you will design and deliver large-scale authentication, authorization, and account management capabilities that support both workforce users and customers across Customer Service contact channels.

Role Overview

You will set and own a multi-year security strategy for CSIAM, define technical direction, and guide the design and delivery of solutions at scale. The work focuses on resilience and correctness, along with authorization models that protect customer and agent interactions, including AI agents and associates acting on a customer’s behalf.

Key Responsibilities

• Own the multi-year security strategy for Customer Service Identity and Access Management (CSIAM), setting technical direction for how workforce users and customers are authenticated and authorized across every Customer Service contact channel.
• Lead the design and delivery of authentication, authorization, and account management solutions at scale, meeting the resilience and correctness needs of a large customer service organization.
• Define and refine authorization models that secure customer and agentic interactions, including governance for how AI agents and associates act on a customer’s behalf without eroding customer trust.
• Act as senior technical leader and escalation point for the team’s most complex and ambiguous security problems, resolving issues directly and through collaboration across multiple service teams.
• Evaluate and introduce emerging security technologies, inventing mechanisms that reduce security tech debt and mitigate risk at scale.
• Communicate complex security risk and strategy clearly to both executive and deeply technical audiences, and provide technical insight that informs business reviews and roadmap decisions.
• Influence and align partner organizations, service owners, and leadership up to the VP level by negotiating security and business priorities and trade-offs, driving teams toward simple, coherent, secure designs.
• Mentor and raise the bar for security engineers across the organization, strengthening technical capability and sharing knowledge across partner organizations.

Minimum Qualifications

• 5+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 5+ years of experience identifying security issues and risks and developing mitigation plans.
• 5+ years of non-internship scripting, programming, and security code review using common programming languages.
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go.
• 5+ years of non-internship industry experience identifying security vulnerabilities, attack patterns, and remediation techniques.
• Experience mentoring, serving as a tech lead, or leading an engineering team.
• 5+ years of non-internship work across at least 5 of the following security domains: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, or identity and access controls.
• Experience applying threat modeling or other risk identification techniques (or equivalent experience).
• Experience securing service-oriented architectures, microservices, and web services.

Technologies

• Scala
• Java
• Python
• C/C++
• Go

Compensation and Location

• Location: Austin, TX (onsite)
• Salary: USD 178,400 - 226,700 per year

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave

Diversity and Inclusion

Amazon Security values diverse experiences. Candidates are encouraged to apply even if not all qualifications and skills listed in the job description are met.

In Amazon Security, it’s in the nature to learn and be curious. Ongoing DEI events and learning experiences support continued learning and embracing uniqueness. Addressing the toughest security challenges involve seeking out and celebrating diversity of ideas, perspectives, and voices.

Our inclusive culture supports Amazonian employees to deliver the best results for customers.

Training and Career Growth

The organization continually raises its performance bar and provides knowledge-sharing, training, and career-advancing resources to help professionals develop into better-rounded practitioners.

Los Angeles County Applicants

• Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies.
• Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position.
• Pursuant to the Los Angeles County Fair Chance Ordinance, qualified applicants with arrest and conviction records will be considered.

Accessibility and Accommodations

If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information.

If the country or region you are applying in isn’t listed, contact your Recruiting Partner.