Senior Software Development Engineer, Ads Agent Identity and Authorization Infrastructure

Amazon.com, Inc.
New York, NY, United States
20 days ago

Role details

Contract type
Internship / Graduate position
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Compensation
$184,900.0 - $250,200.0
Working hours
Regular working hours

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Audit Trail Code Review Computer Programming Software Design Patterns Programming Tools Identity and Access Management Load Testing OAuth Software Engineering Systems Architecture
+8 more
System Availability Build Management Information Technology Low Latency Build Process Software Coding Software Version Control Programming Languages

Job description

We’re building the trust and security layer for AI agents on Amazon Ads. As agents become the primary interface for advertisers and partners, we need infrastructure that gives every agent a unique identity, scoped permissions, and a complete audit trail - while giving advertisers full control over what agents can do on their behalf. This is a new strategic investment area and we’re assembling the team., Design and build authorization infrastructure that evaluates agent permissions at the API layer, enforcing capability-scoped access in real time at low latency and high availability.

  • Own the technical vision for agent authentication flows including delegation mode, autonomous mode, and machine-to-machine auth with short-lived tokens.
  • Build the agent registry system that issues unique identities to 1P and 3P agents, captures declared capabilities, and integrates with downstream enforcement.
  • Design agent-to-agent delegation protocols including scoped tokens and chain-of-trust verification.
  • Drive operational excellence across Tier-1 services handling millions of authorization decisions daily. Influence the broader system architecture across 10+ dependent teams, ensuring authorization integrates cleanly with the Ads Agent platform.
  • Use AI-powered development tools daily to accelerate your own engineering work.

A day in the life You might start the morning reviewing a design for how 3P agents authenticate under their own identity rather than borrowing a user’s OAuth token. Mid-morning you’re in a design review with the Ads Agent Orchestrator team, aligning on how capability-scoped permissions get enforced when an agent invokes MCP tools. After lunch you’re writing code - building the authorization decision engine that evaluates whether ā€œPacVue Bid Optimizerā€ can adjust bids on advertiser X’s campaigns but not touch their creative assets. You close the day pairing with a teammate on load testing the new memcached cluster that needs to handle 400K+ accounts post-backfill without degrading latency.

Your stakeholders include the Ads Agent platform team, Developer Experience (DX), partner-facing teams, and 3P integrators like PacVue and Teikametrics who are building agents on our platform. You’ll work closely with the PMT defining the product and the SDM leading the team.

About the team The Ads Agent Identity and Authorization Infrastructure (AI²) team owns identity and access management for Amazon Ads - for both humans and AI agents. We manage registration, account management, permission controls, and ad-product eligibility serving 5K+ partners and 2M+ advertisers globally with 800K+ registrations per year. We shipped agent registry and agent authorization for 1P agents in Q1 2026 and are now extending to 3P.

We are a team that ships fast, uses AI tooling in our own workflows, and operates with founding-team energy backed by Amazon Ads scale. We’re based in New York (JFK19).

Requirements

5+ years of non-internship professional software development experience

  • 5+ years of programming with at least one software programming language experience
  • 5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience
  • Experience as a mentor, tech lead or leading an engineering team

Preferred Qualifications

  • 5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
  • Bachelor’s degree in computer science or equivalent

Benefits & conditions

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, NY, New York - 184,900.00 - 250,200.00 USD annually

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.amazon.jobs

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz Ā· WWC Europe 2026

3:56 min

Leveraging GitOps for AI auditing and instant rollbacks

Jaroslaw Gajewski Jaroslaw Gajewski Ā· WWC Europe 2026

3:39 min

Addressing code review surrender and process exploitation

Laura Tacho Laura Tacho Ā· WWC Europe 2026

1:06 min

Developer experience and project variety at scale

Alexandra Petri Ā· WWC 2023

1:34 min

Analyzing vulnerabilities in standard OAuth 2.0 authorization flows

Alexander Schwartz Alexander Schwartz Ā· WWC Europe 2026

1:44 min

Balancing artisanal coding skills with automated agent oversight

Jyoti Bansal Jyoti Bansal +1 Ā· WWC Europe 2026

Videos

See all

Related articles

See all