Software Development Engineer II (UM), Bespoke Solutions

Amazon Web Services

Denver, USonsite$144k-$194k/yrPosted Jun 23, 2026
Posting intelligenceActively listed

Skills

postgresc++rustawstypescript

About the role

DESCRIPTION

Application deadline: Jul 25, 2026

Bespoke Solutions is seeking a Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for managing large-scale fleets of embedded devices across highly secure and enterprise network environments. This is a unique opportunity to work at the intersection of distributed systems, security engineering, and fleet operations - building infrastructure that must meet the highest standards of reliability, integrity, and compliance.

We develop AWS owned hardware & software solutions in order to scale globally, minimize cost, and maximize value for our customers. We are a growing team of hardware, software and FPGA engineers with a dedicated product development lab.

If Arlington, VA (Arlington HQ):

This role will sit in our new headquarters in Northern Virginia, where Amazon will invest $2.5 billion dollars, occupy 4 million square feet of energy efficient office space, and create at least 25,000 new full-time jobs. Our employees and the neighboring community will also benefit from the associated investments from the Commonwealth including infrastructure updates, public transportation improvements, and new access to Reagan National Airport.

By working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us.

This position requires that the candidate selected must be a US Citizen and currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work.

10012

Key job responsibilities

Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments

Implement multi-tenant data isolation using attribute-based access control (ABAC), row-level security, and transparent query rewriting - designed to scale from single-tenant to hundreds of tenants over a 5-year horizon

Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging

Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails

Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries

Design reconciliation protocols where edge devices remain the recommended source of truth, with backend systems maintaining synchronized projections

A day in the life

You'll be building the backbone of a platform that securely manages thousands of embedded devices in some of the most demanding operational environments. Your work will directly impact fleet reliability, security posture, and operational efficiency at scale - solving problems that few engineers ever get to tackle.

About the team

About AWS

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Why AWS?

Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge-sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects that help our team members develop your engineering expertise so you feel empowered to take on more complex tasks in the future.

AWS Infrastructure Services (AIS)

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain - and we’re looking for talented people who want to help.

Diverse Experiences

AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Inclusive Team Culture

AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.

BASIC QUALIFICATIONS

Bachelor's degree in computer science or equivalent

3+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience

2+ years of experience with at least one system programming language such as C, C++, or Rust

Strong background in security-hardened system design, including PKI, mutual TLS, and cryptographic signing

Proficiency with PostgreSQL or similar relational databases, including row-level security and policy-based access control

Current, active US Government Security Clearance of Top Secret with SCI eligibility or above

PREFERRED QUALIFICATIONS

3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience

Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)

2+ years of experience in Rust

Background in embedded device fleet management or IoT platforms at scale

Knowledge of FIPS-validated cryptographic modules and NIST-approved algorithms

Current, active US Government Security Clearance of TS/SCI with Polygraph

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CO, Denver - 143,700.00 - 194,400.00 USD annually

USA, MD, Jessup - 143,700.00 - 194,400.00 USD annually

USA, VA, Arlington - 143,700.00 - 194,400.00 USD annually

USA, VA, Herndon - 143,700.00 - 194,400.00 USD annually

Compensation

This Software Engineer role pays $144k-$194k/yr. Within typical range for software engineer roles in United States.

Questions about this role

Click "Apply with AI Applyd" above. We auto-fill the application from your resume and answer screening questions in seconds. No copy and paste, no juggling tabs.

Compensation for Software Engineer roles in United States varies widely by seniority, employer size, and remote vs onsite arrangement. Check the salary range on this listing when published, or browse our Software Engineer hub for United States medians across recent openings.

Most applications complete in under 90 seconds. You can track the status in your dashboard and watch the screenshot proof land the moment the application submits.

AI Applyd supports Greenhouse, Lever, Ashby, Workday, iCIMS, SmartRecruiters, Personio, Teamtailor and other major ATS platforms. If we can submit through the platform, we do.

Want AI Applyd to auto-apply to roles like this?

We tailor your resume per posting, fill the forms, and track replies for you.