Sr. Prototyping Architect, AGS Security Engineering

AWS Global Sales drives adoption of the AWS cloud worldwide, enabling customers of all sizes to innovate and expand in the cloud. Our team empowers every customer to grow by providing tailored service, unmatched technology, and unwavering support. We dive deep to understand each customer's unique challenges, then craft innovative solutions that accelerate their success. This customer-first approach is how we built the world's most adopted cloud. Join us and help us grow.

We're building a new security engineering team for AGS, and we're looking for a Sr. Security Prototyping Architect to help define it from day one. Customers are moving fast, especially into generative AI and agentic architectures, and the way our field works with them is changing just as quickly. This team is the dedicated function that helps the business and our customers build and innovate fast and securely.

As a Sr. Security Prototyping Architect, you are the team's dedicated builder. You partner with account teams and customers on our highest-risk and most ambiguous work, building secure solutions and prototypes directly rather than advising from the side. You take on the work where security is the workload itself, such as security-focused multi-agent systems, CI/CD pipelines for authorization policies, or post-quantum cryptography discovery and migration, proving out how this kind of work gets done securely, from the approach through the implementation. What you build once, you turn into the secure reference patterns and architectures the broader field builds on.

Much of this work runs ahead of established practice. Your work with customers on emerging technologies and agentic architectures evolves both our secure engagement practices and the security builder patterns the field relies on. The customers behind this work span every size, industry, and region, with varying compliance requirements and every kind of technology stack. This is a ground-floor role with a global remit where you'll help define how we work.

Key job responsibilities
- Partner on the highest-risk and most ambiguous engagements as the accountable security owner, building the secure solution directly with autonomy and consulting the team's security engineers when hitting something the frameworks don't cover
- Build security capabilities as the deliverable, such as automated detection-and-response pipelines, policy-as-code guardrails, or identity and access management migrations
- Co-build on prototyping and customer engagements globally, bringing additional security expertise and continuously raising the security bar on how we engage
- Feed what you learn building into our frameworks, governance, and training, and into the feature requests that shape how AWS service teams support secure building
- Work with the team's security engineers to develop or integrate the secure design and builder patterns that get codified into the steering docs, skills, MCPs, agents, and tools the field builds with
- Build and maintain the internal security tooling the team and field relies on with the team's security engineers, and help secure the critical open-source projects AGS owns and customers depend on
- Enable the field to build securely, running build sessions and reusable demos that show how to build secure-by-default with AI-assisted tooling
- Some travel required (up to 25%)

A day in the life
In the morning, you're deep in code on a high-risk engagement, building the security into a multi-agent system and making the call on a thorny authorization design yourself, looping in a security engineer only when you hit something genuinely new. Shortly after, you switch to a prototype you're co-building, where you bring security depth and raise the bar on how the engagement runs. In the afternoon, you turn what you learned on a recent build into a reusable pattern, working with the security engineers to codify it into the steering docs and agents the field builds with. Across the week you contribute fixes to a critical open-source project customers depend on, run a build session showing account teams how to build secure-by-default with AI-assisted tooling, and send a service team the gaps you hit so they can close them.

About the team
This new team is the security engineering function for AWS Global Sales (AGS), helping the field engage customers securely and keeping the business secure. You'll work closely with AWS Account Teams and Prototyping Teams, AGS leaders, and partner teams across AWS security, tooling, and legal. It's a senior team with a broad mandate and a high bar, and the work protects the customer trust the business depends on.

Diverse Experiences
AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why AWS?
Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. - 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience
- 5+ years of design, implementation, or consulting in applications and infrastructures experience
- 3+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby experience
- 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Bachelor's degree in Computer Science, Engineering, a related field, or equivalent experience - Master's degree in Computer Science, Computer Engineering, or related fields
- 5+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience writing technical articles, speaking at technology conferences, and contributing to open source
- Experience building on AWS with infrastructure as code, CI/CD, serverless, and containers
- Experience building with generative AI and agentic technologies, such as Amazon Bedrock, autonomous agents, RAG, or multi-agent systems

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, FL, Miami - 153,600.00 - 207,800.00 USD annually
USA, GA, Atlanta - 153,600.00 - 207,800.00 USD annually
USA, MA, Boston - 153,600.00 - 207,800.00 USD annually
USA, NY, New York - 169,000.00 - 228,600.00 USD annually
USA, VA, Arlington - 153,600.00 - 207,800.00 USD annually
USA, VA, Herndon - 153,600.00 - 207,800.00 USD annually