Senior Software Development Manager, Amazon Internal Auth Services

Amazon's Internal Authentication organization is looking for a Senior Software Development Manager to lead the teams that build and operate the authentication broker and third-party identity provider used across the company. These systems are distinct from Amazon's primary employee identity provider: where that system establishes who you are, the systems you will own determine how that identity is brokered, federated, and extended to the thousands of services and third-party products that make up Amazon's internal ecosystem.

This is a multi-site leadership role spanning Dublin, Herndon, and Seattle. You will own the services that enable single sign-on across a diverse and growing application landscape, manage identity and access for Amazon's non-employee workforce (contractors, partners, and alumni), provide self-service onboarding for application teams integrating with centralized authentication, and extend broker-mediated authentication into Amazon's emerging AI agent ecosystem.

Key job responsibilities

Lead and grow multiple software development teams across three sites, building a unified engineering culture across geographies and time zones.

Own the technical strategy, roadmap, and delivery for authentication brokering, third-party identity management, and application onboarding.

Build and operate systems at Amazon scale with the reliability expectations that come with being in the critical path of nearly every internal service.

Partner closely with security, compliance, and policy teams to ensure access controls keep pace with a growing and evolving threat landscape.

Make pragmatic tradeoffs between usability and security, knowing that friction in authentication has real costs to productivity and that gaps in authentication have real costs to the company.

Hire, develop, and retain strong engineering talent across all three sites, with particular attention to building leadership depth and technical bench strength.

Represent your organization's priorities and technical direction to senior leadership, translating complex identity and access problems into clear business terms.

A day in the life

Your days are spent setting technical strategy for systems that operate at company-wide scale, partnering with security, infrastructure, and application teams across Amazon and external partners to solve hard problems in authentication and identity, and coaching a strong engineering team that builds the solutions. The work is a mix of long-term architectural thinking and short-term judgment calls where security, usability, and partner needs intersect.

About the team

You will own the authentication broker that sits between identity providers and the thousands of relying applications across Amazon, enabling seamless single sign-on without requiring every service to integrate directly with every identity source. You will own the purpose-built identity provider for Amazon's non-employee population: contractors, partners, vendor collaborators, and alumni who need controlled, auditable access with distinct security and lifecycle requirements. And you will own the self-service portal and tooling that lets thousands of application teams onboard to centralized authentication correctly and efficiently.

Basic qualifications

- 10+ years of engineering experience

- 5+ years of engineering team management experience

- Experience managing multiple concurrent programs, projects and development teams in an Agile environment

- Experience designing and developing large scale, high-traffic applications

Preferred qualifications

- Experience with any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing

- Experience building systems that serve both human users and programmatic/automated clients.

- Demonstrated ability to balance security requirements with usability and developer experience.

- Experience with zero-trust architectures or network perimeter evolution.

- Familiarity with federation protocols (SAML, OIDC, OAuth), identity providers, and authentication broker architectures.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Herndon - 220,100.00 - 297,700.00 USD annually

USA, WA, Seattle - 220,100.00 - 297,700.00 USD annually