Systems Dev Engineer, ALM365, Amazon Leo

Amazon Leo is Amazon's low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, and we've designed the system with the capacity, flexibility, and performance to serve a wide range of customers, from individual households to schools, hospitals, businesses, government agencies, and other organizations operating in locations without reliable connectivity.Export Control: This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.The ALM365 Engineering team is accountable for the end-to-end configuration, deployment, and management of Microsoft 365 productivity services and SharePoint Server infrastructure on AWS GovCloud. Our mission is to enable seamless collaboration through secure, reliable, and highly-available services that support the daily operations of Amazon Leo.We are seeking an experienced Systems Development Engineer to take ownership of the technical implementation of M365 services and SharePoint Server on AWS GovCloud, including monitoring, automation, and compliance integration with Leo Security and KIAM.Key job responsibilities- Design and implement M365 and SharePoint Server infrastructure on AWS GovCloud using Infrastructure as Code (CDK/CloudFormation)- Configure and manage M365 services (Teams, SharePoint, OneDrive, Exchange) via Desired State Configuration (DSC)- Enforce compliance with security principles including least-privilege access, password management, and audit logging for all productivity applications- Partner with Leo Security and Global Trade Compliance to ensure compliance with ITAR/EAR export control requirements and NIST SP 800-53 controls- Build automation frameworks and monitoring dashboards using PowerShell and Python to drive operational excellence and scalability- Drive secure external collaboration solutions to support Kuiper program requirements- Develop and maintain runbooks and engineering documentation for both technical audiences and end users- Create and implement automated processes that reduce manual effort and increase overall efficiency- Work closely with cross-functional teams including KIAM, Leo Security, and program planning to meet infrastructure and compliance requirementsExport Control Requirement: Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.A day in the lifeAs a Systems Development Engineer on the ALM365 team, you'll implement and maintain Microsoft 365 services and SharePoint Server on AWS GovCloud. You'll write PowerShell automation and CDK infrastructure code, respond to operational alarms, partner with Leo Security on compliance controls, and collaborate across team boundaries to support Amazon Leo's productivity platform — balancing hands-on engineering with export control and security requirements.About the teamThe ALM365 team owns Amazon Leo's productivity infrastructure — Microsoft 365 (Teams, SharePoint, Exchange, OneDrive), Nextcloud, SharePoint/Project Server on AWS GovCloud, and secure external collaboration services. We operate across two classified environments (KCE-Low and KCE-Mod) and partner closely with Leo Security, KIAM, and program planning to deliver compliant, highly-available collaboration tools for a satellite broadband program subject to ITAR/EAR export controls. Small team, high ownership, meaningful infrastructure work.Basic qualifications- Experience in automating, deploying, and supporting large-scale infrastructure- Experience programming with at least one modern language such as Python, Ruby, Golang, Java, C++, C#, Rust- Experience with PowerShell (preferred), Python, Ruby, or Java- Experience with CI/CD pipelines build processesPreferred qualification - Experience utilizing AWS cloud solutions in a DevOps environmentAmazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at .USA, WA, Bellevue - 129,200.00 - 174,800.00 USD annually