Software Development Engineer II (UM), Bespoke Solutions

Bespoke Solutions is seeking a Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for managing large-scale fleets of embedded devices across highly secure and enterprise network environments. This is a unique opportunity to work at the intersection of distributed systems, security engineering, and fleet operations - building infrastructure that must meet the highest standards of reliability, integrity, and compliance.

We develop AWS owned hardware & software solutions in order to scale globally, minimize cost, and maximize value for our customers. We are a growing team of hardware, software and FPGA engineers with a dedicated product development lab.

If Arlington, VA (Arlington HQ):

This role will sit in our new headquarters in Northern Virginia, where Amazon will invest $2.5 billion dollars, occupy 4 million square feet of energy efficient office space, and create at least 25,000 new full-time jobs. Our employees and the neighboring community will also benefit from the associated investments from the Commonwealth including infrastructure updates, public transportation improvements, and new access to Reagan National Airport.

By working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us.

This position requires that the candidate selected must be a US Citizen and currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work., Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments

• Implement multi-tenant data isolation using attribute-based access control (ABAC), row-level security, and transparent query rewriting - designed to scale from single-tenant to hundreds of tenants over a 5-year horizon
• Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging
• Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails
• Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries
• Design reconciliation protocols where edge devices remain the recommended source of truth, with backend systems maintaining synchronized projections

A day in the life You'll be building the backbone of a platform that securely manages thousands of embedded devices in some of the most demanding operational environments. Your work will directly impact fleet reliability, security posture, and operational efficiency at scale - solving problems that few engineers ever get to tackle.

About the team About AWS

Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Why AWS?

Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we're building an environment that celebrates knowledge-sharing and mentorship. Our senior members enjoy one-on-one mentoring and thorough, but kind, code reviews. We care about your career growth and strive to assign projects that help our team members develop your engineering expertise so you feel empowered to take on more complex tasks in the future.

AWS Infrastructure Services (AIS)

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we're the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain - and we're looking for talented people who want to help.

Bachelor's degree in computer science or equivalent

• 3+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience
• 2+ years of experience with at least one system programming language such as C, C++, or Rust
• Strong background in security-hardened system design, including PKI, mutual TLS, and cryptographic signing
• Proficiency with PostgreSQL or similar relational databases, including row-level security and policy-based access control
• Current, active US Government Security Clearance of Top Secret with SCI eligibility or above, 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
• Knowledge of security technology and concepts (Authentication, Authorization, Single sign-on, Cryptography, etc.)
• 2+ years of experience in Rust
• Background in embedded device fleet management or IoT platforms at scale
• Knowledge of FIPS-validated cryptographic modules and NIST-approved algorithms
• Current, active US Government Security Clearance of TS/SCI with Polygraph

AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.

Mentorship & Career Growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve in the cloud., The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, CO, Denver - 143,700.00 - 194,400.00 USD annually USA, MD, Jessup - 143,700.00 - 194,400.00 USD annually USA, VA, Arlington - 143,700.00 - 194,400.00 USD annually USA, VA, Herndon - 143,700.00 - 194,400.00 USD annually