Software Development Engineer, AWS Config, AWS Config

Are you a software development engineer who wants to build the systems that hundreds of thousands of AWS customers rely on to keep their cloud environments secure and compliant? The AWS Config Reaction team is looking for an SDE to work across our core compliance platform — including the rules evaluation engine, conformance packs, advanced query, aggregators, and automated remediation. AWS Config is how customers enforce security policies, detect misconfigurations, and maintain compliance with frameworks like PCI-DSS, HIPAA, and FedRAMP — both reactively and proactively, across entire AWS Organizations. Our platform continuously assesses millions of resources across thousands of accounts, aggregates compliance data at org scale, enables ad-hoc resource querying, and automates remediation — powering compliance at scale for enterprises worldwide. You'll own critical infrastructure end-to-end: designing, building, and operating distributed systems that evaluate resource configurations at massive scale across every AWS Region. - Work on one of the largest configuration compliance platforms in the world - Full breadth of work: scaling the evaluation engine, extending conformance packs and aggregation, building new customer-facing capabilities, and driving operational excellence - Tenured team with strong engineers, a dedicated PE, and a collaborative leadership structure - Low operational noise — most of your time is spent building, not firefighting - High autonomy with real ownership over what you ship and how you operate it Key job responsibilities - Design, build, and operate high-scale, highly available distributed services that power the AWS Config Compliance and Reporting platforms - Own solutions across the full lifecycle: design, implementation, deployment, monitoring, and support - Improve platform scalability, reliability, and cost efficiency as customer adoption and evaluation volume grow - Build new capabilities that expand how customers evaluate, enforce, and remediate compliance across their AWS resources - Participate in on-call rotation, drive root cause analysis, and continuously improve operational health - Collaborate with partner teams across Config, Resource Explorer, Security Hub, and the broader AWS governance ecosystem - Contribute to a strong engineering culture through rigorous code reviews, design discussions, and technical mentorship of peers A day in the life As an SDE on the Config Reaction team, you'll spend your time designing and building the distributed systems that utilize and evaluate compliance, aggregate inventory and compliance data and enable advanced querying across customer infrastructure at scale. On any given day, you might be writing a design document for a new aggregation capability, diving deep into performance bottlenecks in the query pipeline, or reviewing code with teammates. You'll work closely with tenured engineers and a dedicated Principal Engineer who supports the platform directly. Your customers are both external — the hundreds of thousands of AWS accounts running Conformance Packs to enforce security and compliance policies — and internal, as other AWS services like Security Hub, Control Tower, and Audit Manager depend on the aggregation and query infrastructure you build and operate. When something needs attention operationally, you'll investigate, fix forward, and drive the root cause so the team doesn't see the same issue twice. The team operates with high autonomy. You'll own your projects end-to-end, collaborate across team boundaries when work touches adjacent services like Config Rules, Resource Explorer, or Weirwood, and have the space to propose and drive improvements to how the platform works and how the team operates.

The Config Reaction team owns the services that run on top of Config Recording and Config Rules — a service used by enterprise customers managing millions of resources across thousands of accounts and multiple regions.