Sr. System Development Engineer, Amazon Leo

Amazon Leo is an initiative to increase global broadband access through a constellation of 3236 satellites in low Earth orbit (LEO). Its mission is to bring fast affordable broadband to unserved and underserved communities around the world. Amazon Leo will help close the digital divide by delivering fast affordable broadband to a wide range of customers including consumers businesses government agencies and other organizations operating in places without reliable connectivity.

Export Control: This position requires that the candidate selected be a U.S. Citizen to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.

The role: In this role you will be a key member of the team building and operating AWS infrastructure that supports the organizations business services. You will provide infrastructure support for integrations and multiple SAP S/4HANA systems develop infrastructure as code (IaC) to provision configure and maintain secure scalable and reliable cloud environments. Our ideal candidate is highly autonomous and has a strong knowledge of AWS IaC tools and practices integration patterns authentication and certificate management. The desire and ability to work in a fast-paced collaborative environment is essential.

Key job responsibilities
Design develop and own end-to-end delivery of scalable microservices and APIs integrating AWS services with SAP systems (S/4HANA Ariba SuccessFactors) using protocols such as RFC BAPI IDoc OData and REST.

Build and maintain infrastructure as code (IaC) to provision and manage the AWS infrastructure (EventBridge SQS SNS Step Functions) required to support event-driven architectures and SAP integration pipelines (BTP Integration Suite) per solution specifications.

Troubleshoot and resolve integration failures across distributed systems ensuring high availability and data consistency.

Implement and manage authentication/authorization mechanisms (SAML 2.0 OAuth 2.0 OIDC) and identity provider configuration enabling secure SSO in hybrid environments.

Automate Certificate lifecycle management (provisioning renewal rotation revocation) using ACM and AWS Private CA including monitoring alerting and compliance with security standards (e.g. mTLS).

Develop and integrate AI/ML capabilities into SAP workflows using Bedrock SageMaker Textract and Comprehend for intelligent automation (document processing conversational interfaces forecasting)

Collaborate with data engineers to build pipelines feeding SAP transactional data into ML models for anomaly detection and process optimization.

Participate in on-call rotations drive root cause analysis and maintain operational dashboards alarms and runbooks to continuously improve reliability and cost efficiency

Mentor junior engineers drive technical decisions and author design documents that influence the teams SAP integration and AI roadmap

Collaborate cross-functionally with SAP Basis security and product teams to align on requirements and delivery

Work closely with the offshore support team to coordinate issue triage and resolution provide clear handoffs share technical context and improve support processes across time zones.

Develop and integrate AI/ML capabilities into SAP workflows using Amazon Bedrock AgentCore SageMaker Textract and Comprehend for intelligent automation including building MCP (Model Context Protocol) tool servers Fiori integration patterns (BAdI extension calls side panel plugins full custom agent applications) and conversational AI interfaces.

Design and build agentic AI solutions on Amazon Bedrock and AgentCore including MCP tool servers multi-agent orchestration knowledge bases and AI safety guardrails for SAP-integrated workflows.

Own the integration of AI co-pilot experiences into enterprise surfaces (Quick Suite Fiori) ensuring secure cross-partition data flow agent evaluation and monitoring and alignment with the organizations AWS-first AI strategy.


A day in the life
This is an excellent opportunity to join Amazon Leos world class technical team working with some of the best and brightest engineers while also developing your skills and furthering your career within one of the most innovative programs.

About the team
You will be joining a team of engineers responsible for building and operating the cloud infrastructure and integrations that power Amazon Leos enterprise applications including SAP S/4HANA and AI-driven workflows on AWS. Our work directly supports the mission of delivering global broadband access through a constellation of 3236 satellites. We value curiosity ownership and collaboration; our engineers regularly contribute to architecture decisions mentor peers and explore emerging AWS services like Bedrock and SageMaker. Youll have the opportunity to work across distributed systems security and machine learning in a supportive growth-oriented environment.

- 5 years of designing or architecting (design patterns reliability and scaling) of new and existing systems experience
- 3 years of programming with at least one modern language such as C C# Java Python Golang PowerShell Ruby experience
- Experience with Linux/Unix
- Experience with CI/CD pipelines build processes
- Experience with AWS core services (EC2 Lambda S3 IAM CloudFormation or CDK)
- Experience with load balancing technologies (ALB/NLB a plus)
- Experience with authentication protocols (SAML 2.0 OAuth 2.0 OIDC) and certificate management
- Experience with AI/ML agent frameworks LLM-based application development or conversational AI platforms

- Experience with distributed systems at scale
- 8 years of experience in systems development or cloud infrastructure engineering
- Deep expertise with AWS infrastructure services (VPC EC2 Lambda CDK/Terraform CloudFormation)
- Strong background in authentication and identity management (IAM SSO SAML 2.0 OAuth 2.0 OpenID Connect)
- Experience with certificate management at scale using AWS Certificate Manager Private CA and TLS/mTLS automation
- Hands-on experience with SAP on AWS (S/4HANA BTP Ariba) and SAP integration patterns (RFC IDoc OData)
- Experience applying AWS AI/ML services (Bedrock SageMaker Textract) to enterprise workflows
- Experience with Amazon Bedrock (AgentCore Knowledge Bases Guardrails) or similar agentic AI platforms
- Familiarity with Model Context Protocol (MCP) Agent-to-Agent (A2A) orchestration or similar tool/agent interoperability patterns
- Experience with AI safety practices including prompt engineering grounding validation human-in-the-loop write gates and PII handling in AI contexts

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at WA Bellevue - 151200.00 - 204600.00 USD annually