Software Development Engineer, AWS Identity, IAM Data Plane Credentials Distribution Systems

What does it take to distribute billions of security credentials every day to every host across Amazons infrastructure - without ever going down Thats the challenge at the core of this role.

As a Software Development Engineer on the AWS Credentials Distribution Systems (CreDS) team youll build and operate the IAM role credential distribution platform for Amazons internal infrastructure a tier-0 system that every single service team across the company depends on. Your work ensures that hosts receive short-lived least-privilege credentials seamlessly eliminating the operational burden of credential rotation at Amazons scale. Your primary focus will be keeping this system secure scalable and resilient designing for failure and driving automation. Youll also work backwards from internal customers to simplify credential management building features and tooling that make adoption seamless and effortless for service teams.

Strong ownership and operational excellence are essential to succeed in this role. If youre passionate about distributed systems cloud security and building infrastructure that thousands of teams depend on every day this is the role for you.

Key job responsibilities
- Design build and operate a tier-0 credential distribution system that serves every service team across Amazons internal infrastructure
- Own and continuously improve system reliability scalability and security proactively identifying risks and building mechanisms to prevent recurring issues
- Work backwards from internal customers to simplify credential management building features and tooling that make adoption seamless and effortless
- Drive operational excellence through automation monitoring improvements and runbook development reducing operational toil and improving mean time to resolution
- Collaborate with partner teams across Amazon to drive credential migration and adoption goals
- Troubleshoot and resolve complex distributed systems issues across multiple layers of the stack
- Participate in on-call rotations and contribute to incident response root cause analysis and corrective action follow-through
- Contribute to system design and architecture decisions ensuring long-term scalability and maintainability
- Leverage AI tooling to improve engineering productivity automate workflows and raise the bar on operational efficiency
- Raise the bar for engineering quality through thorough code reviews testing practices and technical documentation

About the team
The AWS Credentials Distribution Systems (CreDS) team sits within AWS Identity and Access Management (IAM) - the backbone of cloud security at Amazon. We own tier-0 services that distribute and manage ephemeral least-privilege credentials across AWS compute platforms and Amazons internal infrastructure.

We hold a high bar for system reliability security and scalability backed by rigorous operational practices thorough code reviews and a bias toward automation. When an issue arises we own it learn from it and build mechanisms to prevent it from recurring.


- 3 years of non-internship professional software development experience
- 2 years of non-internship design or architecture (design patterns reliability and scaling) of new and existing systems experience
- 1 years of software development engineer or related occupational experience
- 1 years of designing and developing large-scale multi-tiered multi-threaded embedded or distributed software applications tools systems and services using: C# C Java or Perl experience
- 1 years of Object Oriented Design experience
- Bachelors degree or foreign equivalent in Computer Science Engineering Mathematics or a related field
- Experience programming with at least one software programming language

- 3 years of full software development life cycle including coding standards code reviews source control management build processes testing and operations experience
- Bachelors degree in computer science or equivalent

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at WA Seattle - 143700.00 - 194400.00 USD annually