Solutions Architect (IAM), Customer Logistics Security, Customer Logistics Security

Amazon’s Customer Logistics Security team is seeking a dynamic, multifaceted identity and access management (IAM) solutions architect to design and architect the IAM program within Amazon’s global Fulfillment Operations. You must be a “bar-raiser” in the design and implementation of strategic technologies and solutions for the massive scale of digital security systems. This is a visible role and will interact broadly across many technical teams. This is an ideal role for someone who wants to have a large impact on this fast-growing, cutting-edge business. This is not an administrative role. You will be creating and building Identity and Access Management solutions.

Key job responsibilities
Architect, pilot and design services to enable effective Identity and Access Management throughout Operations

Ensure designs comply with IAM principals including: least privilege access, password management, audit logging, RBAC, certificate issuance and revocation, and AAA solutions.

Become an expert in the Amazon identity management ecosystem and identify existing services and capabilities that may solve existing problems

Engage with and influence stakeholders to ensure compliance, security and operational functional requirements are met or exceeded

Mentor and educate developers and team members in IAM protocols and principals

Identify the appropriate KPI’s for the IAM services

Basic Qualifications

• 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience
• 3+ years of design, implementation, or consulting in applications and infrastructures experience
• Thorough understanding of common identity standards (OAUTH, SAML, FIDO2, etc)
• Deep knowledge of authentication protocols (LDAP, Kerberos, etc)
• Hands-on experience with OAuth 2.0, OpenID Connect and SAML 2.0 protocols and deployment
• Hands-on experience with multi-factor authentication methods (security keys, OTP, passkeys, biometrics).

Preferred Qualifications

• Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients
• Familiarity with AWS Security controls and deployment
• Knowledge and experience with Identity and Access Management technologies, particularly (AWS Cognito and Federate)
• Experience with user provisioning, system authorization, PKI, MFA, AAA solutions, and password vaulting systems and services
• Previous experience in factory, manufacturing or Industrial Control System environments
• Experience with OS level authentication systems (Windows, Mac OS X, linux variants, IOS, and Android)
• Familiarity with warehouse devices (hand scanners, constrained compute devices)
• CISSP in good standing

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.


Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $122,900/year in our lowest geographic market up to $239,000/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. Applicants should apply via our internal or external career site.