Senior Systems Development Engineer, Workforce Identity and Access Management

- Experience with Linux/Unix
- 6+ years of systems design, software development, operations, automation, and process improvement experience
- 6+ years of deploying and operating in a Linux/Unix environment experience
- Experience writing technical documents, project plans and progress reports to leadership and to stakeholders
- Experience with programming languages like Python, JavaScript, Go, .Net, Java or equivalent
- Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
- Experience with distributed systems at scale
- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience in mentoring, leading, or managing more junior engineers
- Experience leading and influencing your team or organization, or experience in computer architecture

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, Irvine - 151,200.00 - 204,600.00 USD annually
Protect Ring's customer trust and business continuity through secure, automated identity management. Your work will prevent access failures and security incidents for 9,000+ Ring, Blink, Key, and Sidewalk team members across four business units. Lead design and delivery of workforce IAM automation, building systems that secure service credentials, provision team-based access, and eliminate manual identity management. Set technical direction for RBKS identity architecture, influence security decisions across multiple teams, and mentor engineers while participating in promotion assessments.

Key job responsibilities
Lead architecture and design of workforce identity and access management solutions across RBKS organizations. Build and maintain identity automation systems for user lifecycle management, access provisioning, and security. Manage 1,000+ SSO integrations using SAML and OIDC protocols. Design automated credential management systems including rotation, vaulting, and least-privilege controls. Respond to and coordinate resolution of IAM-related security incidents with InfoSec teams. Deploy and maintain collaboration platform infrastructure using EKS, CDK, Helm, and ArgoCD. Influence multi-team security architecture decisions and mentor engineers.

A day in the life
Your mornings might start with leading architectural design sessions where you're shaping how 200+ engineering teams will gain access to their tools. When security incidents arise—like a suspected unauthorized access attempt—you'll coordinate the response with InfoSec, investigating the root cause and implementing safeguards. Throughout the day, you'll enable teams to manage their own access by configuring automated provisioning, troubleshoot production issues like API rate limiting, and deploy infrastructure updates to critical systems like Jira using modern tools like EKS and ArgoCD, all while maintaining zero downtime.

About the team
We're a 6-person engineering team managing identity, collaboration, and development tools for RBKS (Ring, Blink, Key and Sidewalk). We build automation services handling employee lifecycle and access provisioning. We participate in weekly on-call rotation, value ownership, celebrate knowledge sharing, and maintain work-life balance.

Your customers are all RBKS employees—from engineers and customer service to operations and marketing—who depend on frictionless, secure access to collaboration tools. When you automate provisioning workflows or quickly resolve SSO integration issues, you're removing friction that slows teams across RBKS.