Software Development Engineer, AWS Config, AWS Config

Are you a software development engineer who wants to build the systems that hundreds of thousands of AWS customers rely on to keep their cloud environments secure and compliant? The AWS Config Reaction team is looking for an SDEto work across our core compliance platform — including the rules evaluation engine, conformance packs, advanced query, aggregators, and automated remediation.AWS Config is how customers enforce security policies, detect misconfigurations, and maintain compliance with frameworks like PCI-DSS, HIPAA, and FedRAMP — both reactively and proactively, across entire AWS Organizations. Our platform continuously assesses millions of resources across thousands of accounts, aggregates compliance data at org scale, enables ad-hoc resource querying, and automates remediation — powering compliance at scale for enterprises worldwide.You'll own critical infrastructure end-to-end: designing, building, and operating distributed systems that evaluate resource configurations at massive scale across every AWS Region. - Work on one of the largest configuration compliance platforms in the world - Full breadth of work: scaling the evaluation engine, extending conformance packs and aggregation, building new customer-facing capabilities, and driving operational excellence - Tenured team with strong engineers, a dedicated PE, and a collaborative leadership structure - Low operational noise — most of your time is spent building, not firefighting - High autonomy with real ownership over what you ship and how you operate itKey job responsibilities - Design, build, and operate high-scale, highly available distributed services that power the AWS Config Compliance and Reporting platforms - Own solutions across the full lifecycle: design, implementation, deployment, monitoring, and support - Improve platform scalability, reliability, and cost efficiency as customer adoption and evaluation volume grow - Build new capabilities that expand how customers evaluate, enforce, and remediate compliance across their AWS resources - Participate in on-call rotation, drive root cause analysis, and continuously improve operational health - Collaborate with partner teams across Config, Resource Explorer, Security Hub, and the broader AWS governance ecosystem - Contribute to a strong engineering culture through rigorous code reviews, design discussions, and technical mentorship of peersA day in the lifeAs an SDE on the Config Reaction team, you'll spend your time designing and building the distributed systems that utilize and evaluate compliance, aggregate inventory and compliance data and enable advanced querying across customer infrastructure at scale. On any given day, you might be writing a design document for a new aggregation capability, diving deep into performance bottlenecks in the query pipeline, or reviewing code with teammates. You'll work closely with tenured engineers and a dedicated Principal Engineer who supports the platform directly.Your customers are both external — the hundreds of thousands of AWS accounts running Conformance Packs to enforce security and compliance policies — and internal, as other AWS services like Security Hub, Control Tower, and Audit Manager depend on the aggregation and query infrastructure you build and operate. When something needs attention operationally, you'll investigate, fix forward, and drive the root cause so the team doesn't see the same issue twice.The team operates with high autonomy. You'll own your projects end-to-end, collaborate across team boundaries when work touches adjacent services like Config Rules, Resource Explorer, or Weirwood, and have the space to propose and drive improvements to how the platform works and how the team operates.About the teamThe Config Reaction team owns the services that run on top of Config Recording and Config Rules — a service used by enterprise customers managing millions of resources across thousands of accounts and multiple regions. We build the systems that enable customers to continuously assess compliance, detect drift, and enforce security policy across their entire AWS environment.Our team puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at work or online. Instead, we're happy to offer a flexible schedule so you can have a more productive and well-balanced life—both in and outside of work.Basic qualifications- 3+ years of non-internship professional software development experience- 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience- 1+ years of software development engineer or related occupational experience- 1+ years of designing and developing large-scale, multi-tiered, multi-threaded, embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl experience- 1+ years of Object Oriented Design experience- Bachelor's degree or foreign equivalent in Computer Science, Engineering, Mathematics, or a related field- Experience programming with at least one software programming languagePreferred qualification - 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience- Bachelor's degree in computer science or equivalentAmazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at .USA, VA, Arlington - 143,700.00 - 194,400.00 USD annually