Systems Development Engineer, Workforce Identity & Access Management

- Experience programming with at least one modern language such as Python, Ruby, Golang, Java, C++, C#, Rust
- Experience with Linux/Unix
- Experience with CI/CD pipelines build processes
- 1+ years of non-internship professional software development experience
- Experience building services using AWS products
- Knowledge of systems engineering fundamentals (networking, storage, operating systems)
- Experience with distributed systems at scale
- Experience in deploying identity and access management systems
- Experience in Kubernetes, Docker or containers ecosystem, or experience in software development and experience with automation and any version control tools
- Experience with AI/ML technologies
- Experience with identity provider platforms such as Okta, Azure AD, or Ping Identity
- Experience with authentication protocols: SAML 2.0, OIDC, or OAuth 2.0
- Experience with automated credential management or secrets vaulting solutions

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CA, Irvine - 129,200.00 - 174,800.00 USD annually
Protect Ring's customer trust through secure, automated identity management. Build IAM systems that keep 9,000+ Ring, Blink, Key, and Sidewalk team members productive while preventing unauthorized access and security incidents. Own end-to-end delivery of identity automation projects implementing features that secure service credentials, provision team-based access, and eliminate manual identity management. Write production code that runs daily, collaborate with senior engineers on system design, and use AI-powered tools to accelerate development.

Key job responsibilities
Implement identity automation features for user lifecycle management, access provisioning, and security controls. Develop and maintain integrations between organizational systems and identity provider platforms. Build serverless automation using AWS Lambda, SQS, DynamoDB for identity workflows. Configure and troubleshoot SSO integrations using SAML and OIDC protocols. Respond to IAM-related security incidents and support internal security audits. Deploy and maintain collaboration platform applications using Helm, ArgoCD, and infrastructure-as-code. Collaborate with senior engineers on system architecture and design decisions.

A day in the life
You might start by onboarding a new application to Okta, configuring SAML integration and testing the authentication flow to ensure seamless access. When the help desk escalates SSO failures, you'll dig into logs, identify the root cause, and implement fixes that prevent recurrence. Throughout the day, you'll work on automating access provisioning—like linking Slack channel membership to identity groups or building serverless functions that sync team memberships. You'll also respond to security incidents, deploy application updates using Helm and ArgoCD, and enhance the infrastructure that powers our IAM automations running on AWS.

About the team
We're a 6-person engineering team managing identity, collaboration, and development tools for RBKS (Ring, Blink, Key and Sidewalk). We build automation services handling employee lifecycle and access provisioning. We participate in weekly on-call rotation, value ownership, celebrate knowledge sharing, and maintain work-life balance.

Your customers are all RBKS employees—from engineers and customer service to operations and marketing—who depend on frictionless, secure access to collaboration tools. When you automate provisioning workflows or quickly resolve SSO integration issues, you're removing friction that slows teams across RBKS.