Software Development Engineer, AWS Config, AWS Config

Are you a software development engineer who wants to build the systems that hundreds of thousands of AWS customers rely on to keep their cloud environments secure and compliant? The AWS Config Rules Platform team is looking for an SDE to work on the core evaluation engine that continuously assesses millions of resources across thousands of accounts — powering compliance at scale for enterprises worldwide. AWS Config Rules is how customers enforce security policies, detect misconfigurations, and maintain compliance with frameworks like PCI-DSS, HIPAA, and FedRAMP — both reactively and proactively, across entire AWS Organizations. You'll own critical infrastructure end-to-end: designing, building, and operating distributed systems that evaluate resource configurations at massive scale across every AWS Region. - Work on one of the largest configuration compliance platforms in the world - Full breadth of work: scaling the evaluation engine, building new customer-facing capabilities, and driving operational excellence - Tenured team with strong engineers, a dedicated PE, and a collaborative leadership structure - Low operational noise — most of your time is spent building, not firefighting - High autonomy with real ownership over what you ship and how you operate it Key job responsibilities - Design, build, and operate high-scale, highly available distributed services that power the AWS Config Rules evaluation engine - Own solutions across the full lifecycle: design, implementation, deployment, monitoring, and support - Improve platform scalability, reliability, and cost efficiency as customer adoption and evaluation volume grow - Build new capabilities that expand how customers evaluate, enforce, and remediate compliance across their AWS resources - Participate in on-call rotation, drive root cause analysis, and continuously improve operational health - Collaborate with partner teams across Config, Resource Explorer, Security Hub, and the broader AWS governance ecosystem - Contribute to a strong engineering culture through rigorous code reviews, design discussions, and technical mentorship of peers A day in the life As an SDE on the Config Rules Platform team, you'll spend your time designing and building the distributed systems that evaluate customer compliance at scale. On any given day, you might be writing a design document for a new evaluation capability, diving deep into performance bottlenecks in the evaluation pipeline, or reviewing code with teammates. You'll work closely with tenured engineers and a dedicated Principal Engineer who supports the platform directly. Your customers are both external — the hundreds of thousands of AWS accounts running Config Rules to enforce security and compliance policies — and internal, as other AWS services like Security Hub and Conformance Packs depend on the evaluation infrastructure you build and operate. When something needs attention operationally, you'll investigate, fix forward, and drive the root cause so the team doesn't see the same issue twice. The team operates with high autonomy. You'll own your projects end-to-end, collaborate across team boundaries when work touches adjacent services like Resource Explorer or Weirwood, and have the space to propose and drive improvements to how the platform works and how the team operates.

The Config Rules Platform team owns the core evaluation infrastructure that underpins AWS Config Rules — a service used by enterprise customers managing millions of resources across thousands of accounts and multiple regions. We build the systems that enable customers to continuously assess compliance, detect drift, and enforce security policy across their entire AWS environment. Our team puts a high value on work-life balance. Striking a healthy balance between your personal and professional life is crucial to your happiness and success here, which is why we aren't focused on how many hours you spend at work or online.