Are you a software development engineer who wants to build the systems that hundreds of thousands of AWS customers rely on to keep their cloud environments secure and compliant? The AWS Config Rules Platform team is looking for
an SDE to work on the core evaluation engine that continuously assesses millions of resources across thousands of accounts - powering compliance at scale for enterprises worldwide.
AWS Config Rules is how customers enforce security policies, detect misconfigurations, and maintain compliance with frameworks like PCI-DSS, HIPAA, and FedRAMP - both reactively and proactively, across entire AWS Organizations.
You'll own critical infrastructure end-to-end: designing, building, and operating distributed systems that evaluate resource configurations at massive scale across every AWS Region.
- Work on one of the largest configuration compliance platforms in the world
- Full breadth of work: scaling the evaluation engine, building new customer-facing capabilities, and driving operational excellence
- Tenured team with strong engineers, a dedicated PE, and a collaborative leadership structure
- Low operational noise - most of your time is spent building, not firefighting
- High autonomy with real ownership over what you ship and how you operate it
Key job responsibilities
- Design, build, and operate high-scale, highly available distributed services that power the AWS Config Rules evaluation engine
- Own solutions across the full lifecycle: design, implementation, deployment, monitoring, and support
- Improve platform scalability, reliability, and cost efficiency as customer adoption and evaluation volume grow
- Build new capabilities that expand how customers evaluate, enforce, and remediate compliance across their AWS resources
- Participate in on-call rotation, drive root cause analysis, and continuously improve operational health
- Collaborate with partner teams across Config, Resource Explorer, Security Hub, and the broader AWS governance ecosystem
- Contribute to a strong engineering culture through rigorous code reviews, design discussions, and technical mentorship of peers
A day in the life
As an SDE on the Config Rules Platform team, you'll spend your time designing and building the distributed systems that evaluate customer compliance at scale. On any given day, you might be writing a design document for a new
evaluation capability, diving deep into performance bottlenecks in the evaluation pipeline, or reviewing code with teammates. You'll work closely with tenured engineers and a dedicated Principal Engineer who supports the
platform directly.
Your customers are both external - the hundreds of thousands of AWS accounts running Config Rules to enforce security and compliance policies - and internal, as other AWS services like Security Hub and Conformance Packs depend
on the evaluation infrastructure you build and operate. When something needs attention operationally, you'll investigate, fix forward, and drive the root cause so the team doesn't see the same issue twice.
The team operates with high autonomy. You'll own your projects end-to-end, collaborate across team boundaries when work touches adjacent services like Resource Explorer or Weirwood, and have the space to propose and drive
improvements to how the platform works and how the team operates.
About the team
The Config Rules Platform team owns the core evaluation infrastructure that underpins AWS Config Rules - a service used by enterprise customers managing millions of resources across thousands of accounts and multiple regions. We
build the systems that enable customers to continuously assess compliance, detect drift, and enforce security policy across their entire AWS environment.
Our team puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at
work or online. Instead, we're happy to offer a flexible schedule so you can have a more productive and well-balanced life-both in and outside of work.
BASIC QUALIFICATIONS
- 3+ years of non-internship professional software development experience
- 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience
- 1+ years of software development engineer or related occupational experience
- 1+ years of designing and developing large-scale, multi-tiered, multi-threaded, embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl experience
- 1+ years of Object Oriented Design experience
- Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics, or a related field
- Experience programming with at least one software programming language
PREFERRED QUALIFICATIONS
- 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
- Bachelor's degree in computer science or equivalent
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually
