Software Development Engineer, Perimeter Protection (Anti-DDoS), NFW

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we're the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain - and we're looking for talented people who want to help.

You'll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You'll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you'll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.

Would you like to develop new AWS services that enhance our customers' ability to protect web applications against evolving threats and attacks?

AWS Perimeter Protection has created unique technology and innovative services such as AWS Shield, AWS WAF, AWS Firewall Manager and Network Firewall to monitor and defend some of the largest distributed networks in the world, but it is still only Day 1.

At AWS, you'll have the opportunity to raise the bar, developing brand new features for recently launched services that defend against evolving threats while providing customers with centralized management and visibility.

We build everything from low-level packet inspection hardware/software to customer-facing AWS services to globally distributed systems capable of mitigating the world's largest and most sophisticated attacks.

We are looking for talented, motivated and innovative software engineers to join a world-class team responsible for contributing to continued development and enhancement to Network Firewall.

Join us if …

• You want to develop services that defend some of the Internet's largest businesses from bad actors and malicious requests. The problems we solve are complex and constantly evolving.
• You care deeply about delighting customers and building high quality software. Our leadership principles (http://www.amazon.jobs/principles) empower us to act and challenge us never to accept the status quo.
• You want to work in a fast-paced environment with a start-up atmosphere. We ship code every day!

Key job responsibilities

• Design and implement high-throughput, low-latency distributed systems that detect and mitigate DDoS attacks in real time, protecting AWS customers at massive scale
• Develop deep packet inspection and traffic analysis solutions to identify malicious patterns and enforce network security policies across the AWS perimeter
• Build and optimize data-plane and control-plane components for AWS Network Firewall, ensuring resilience under adversarial conditions
• Own features end-to-end-from gathering customer requirements through design, implementation, testing, deployment, and operational support
• Collaborate with cross-functional teams including networking, security, and applied science to research and deliver innovative anti-DDoS countermeasures
• Contribute to system architecture decisions that balance performance, cost, and security trade-offs at cloud scale
• Drive operational excellence through automation, monitoring, alarming, and participation in on-call rotations to maintain service availability
• Participate in code reviews, design reviews, and technical documentation to maintain high engineering standards and mentor peers