Software Development Engineer, Identity Services

- 3+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience
- Experience debugging, profiling, and implementing best software engineering practices in large-scale systems
- Experience programming with at least one software programming language, or experience (non-internship) in professional software development
- Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
- Experience working with high-availability, distributed systems and services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, WA, Seattle - 143,700.00 - 194,400.00 USD annually
Identity Services are the guardians of Amazon’s most sacred asset - customer trust! The stakes for us at Amazon have never been greater as Amazon expand more into customers’ daily lives. We enable Amazon businesses to scale by providing secure authentication and authorization solutions in the most possible friction-less manner. We are moving towards the vision where our clients no longer have to choose between sophisticated security and user convenience. Our guiding principle for adaptive authentication is simple; if we suspect a risk in our multiple risk-layer checks, which run quietly in the background, we will deploy the most secure and appropriate available solution, and if we do not, we will let the customer use Amazon unimpeded.

We're seeking a Software Engineer to join our Identity Services team, responsible for authentication and session management systems that serve millions of customers across web, mobile, and device platforms.

Key job responsibilities
* Design and implement secure authentication and authorization systems using bearer token schemes and session management protocols
* Build and maintain high-performance validation services with strict latency requirements (sub-10ms response times)
* Develop intelligent authentication systems that balance security with user experience, reducing unnecessary re-authentication friction
* Implement security features including token binding, risk evaluation, and fraud detection mechanisms
* Collaborate with security teams to detect and prevent account takeover attempts and cookie theft
* Work on token lifecycle management including creation, validation, exchange, and invalidation across multiple platforms

About the team
AuthZero is the team responsible for authentication and session management across Amazon's platform. We own critical services including Aztec Service for token management and work closely with the Session Service team. Our systems handle token creation, validation, exchange, and invalidation for web, mobile apps, devices, and Login with Amazon (LWA). We're at the forefront of reducing authentication friction through Intelligent Authentication while maintaining robust security. The team tackles complex challenges including cookie theft detection, risk-based authentication, and building scalable systems that process authentication requests with sub-10ms latency at massive scale.