Systems Dev Engineer, ALM365, Amazon Leo

Amazon Leo is Amazons low Earth orbit satellite broadband network. Its mission is to deliver fast reliable internet to customers and communities around the world and weve designed the system with the capacity flexibility and performance to serve a wide range of customers from individual households to schools hospitals businesses government agencies and other organizations operating in locations without reliable connectivity.

Export Control: This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.

The ALM365 Engineering team is accountable for the end-to-end configuration deployment and management of Microsoft 365 productivity services and SharePoint Server infrastructure on AWS GovCloud. Our mission is to enable seamless collaboration through secure reliable and highly-available services that support the daily operations of Amazon Leo.

We are seeking an experienced Systems Development Engineer to take ownership of the technical implementation of M365 services and SharePoint Server on AWS GovCloud including monitoring automation and compliance integration with Leo Security and KIAM.

Key job responsibilities
- Design and implement M365 and SharePoint Server infrastructure on AWS GovCloud using Infrastructure as Code (CDK/CloudFormation)
- Configure and manage M365 services (Teams SharePoint OneDrive Exchange) via Desired State Configuration (DSC)
- Enforce compliance with security principles including least-privilege access password management and audit logging for all productivity applications
- Partner with Leo Security and Global Trade Compliance to ensure compliance with ITAR/EAR export control requirements and NIST SP 800-53 controls
- Build automation frameworks and monitoring dashboards using PowerShell and Python to drive operational excellence and scalability
- Drive secure external collaboration solutions to support Kuiper program requirements
- Develop and maintain runbooks and engineering documentation for both technical audiences and end users
- Create and implement automated processes that reduce manual effort and increase overall efficiency
- Work closely with cross-functional teams including KIAM Leo Security and program planning to meet infrastructure and compliance requirements

Export Control Requirement: Due to applicable export control laws and regulations candidates must be a U.S. citizen or national U.S. permanent resident (i.e. current Green Card holder) or lawfully admitted into the U.S. as a refugee or granted asylum.

A day in the life
As a Systems Development Engineer on the ALM365 team youll implement and maintain Microsoft 365 services and SharePoint Server on AWS GovCloud. Youll write PowerShell automation and CDK infrastructure code respond to operational alarms partner with Leo Security on compliance controls and collaborate across team boundaries to support Amazon Leos productivity platform balancing hands-on engineering with export control and security requirements.

About the team
The ALM365 team owns Amazon Leos productivity infrastructure Microsoft 365 (Teams SharePoint Exchange OneDrive) Nextcloud SharePoint/Project Server on AWS GovCloud and secure external collaboration services. We operate across two classified environments (KCE-Low and KCE-Mod) and partner closely with Leo Security KIAM and program planning to deliver compliant highly-available collaboration tools for a satellite broadband program subject to ITAR/EAR export controls. Small team high ownership meaningful infrastructure work.

- Experience in automating deploying and supporting large-scale infrastructure
- Experience programming with at least one modern language such as Python Ruby Golang Java C C# Rust
- Experience with Linux/Unix
- Experience with CI/CD pipelines build processes

- Experience with distributed systems at scale

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at WA Bellevue - 129200.00 - 174800.00 USD annually

Required Experience:

IC

]]><