Senior Software Dev Engineer (UM), Bespoke Solutions
Amazon
- Location
- US, VA, Herndon
- Employment
- Full Time
- Work model
- On-Site
- Level
- Senior
- Posted
- 22h ago
Skills
About this role
Application deadline: Jul 28, 2026 Bespoke Solutions is seeking a Senior Software Development Engineer to design, build, and operate a mission-critical, multi-tenant platform for managing large-scale fleets of embedded devices across highly secure and enterprise network environments. This is a unique opportunity to work at the intersection of distributed systems, security engineering, and fleet operations — building infrastructure that must meet the highest standards of reliability, integrity, and compliance. We develop AWS owned hardware & software solutions in order to scale globally, minimize cost, and maximize value for our customers. We are a growing team of hardware, software and FPGA engineers with a dedicated product development lab. If Arlington, VA (Arlington HQ): This role will sit in our new headquarters in Northern Virginia, where Amazon will invest $2.5 billion dollars, occupy 4 million square feet of energy efficient office space, and create at least 25,000 new full-time jobs. Our employees and the neighboring community will also benefit from the associated investments from the Commonwealth including infrastructure updates, public transportation improvements, and new access to Reagan National Airport. By working together on behalf of our customers, we are building the future one innovative product, service, and idea at a time. Are you ready to embrace the challenge? Come build the future with us. This position requires that the candidate selected must be a US Citizen and currently possess and maintain an active TS/SCI security clearance. The position further requires that, after start, the selected candidate obtain and maintain an active TS/SCI security clearance with polygraph or commensurate clearance for each government agency for which they perform AWS work. 10012 Key job responsibilities - Architect and develop a decomposed, microservices-based platform comprising independently deployable and horizontally scalable subsystems (fleet management, rule execution, device communication, logging, security, and presentation layers) - Design and implement secure inter-service communication across both control plane (REST/mTLS) and high-throughput data plane (streaming) protocol surfaces - Build and maintain cryptographic trust infrastructure supporting multiple certificate authority hierarchies with offline validation mechanisms suited to disconnected environments - Implement multi-tenant data isolation using attribute-based access control (ABAC), row-level security, and transparent query rewriting — designed to scale from single-tenant to hundreds of tenants over a 5-year horizon - Develop cryptographic integrity mechanisms for configuration and audit data, including chained signatures and append-only tamper-evident logging - Engineer emergency access ("break-glass") workflows with time-bounded credentials, multi-party approval, and segregated audit trails - Ensure all cryptographic operations leverage FIPS 140-2 Level 3 validated key management with strict key isolation boundaries - Design reconciliation protocols where edge devices remain the recommended source of truth, with backend systems maintaining synchronized projections A day in the life You'll be building the backbone of a platform that securely manages thousands of embedded devices in some of the most demanding operational environments. Your work will directly impact fleet reliability, security posture, and operational efficiency at scale — solving problems that few engineers ever get to tackle.
About the team
About AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Why AWS? Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and