Amazon Leo is an initiative to increase global broadband access through a constellation of 3,236 satellites in low Earth orbit (LEO). Its mission is to bring fast, affordable broadband to unserved and underserved communities around the world. Amazon Leo will help close the digital divide by delivering fast, affordable broadband to a wide range of customers, including consumers, businesses, government agencies, and other organizations operating in places without reliable connectivity.
Export Control: This position requires that the candidate selected be a U.S. Citizen to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.
The role: In this role, you will be a key member of the team building and operating AWS infrastructure that supports the organization’s business services. You will provide infrastructure support for integrations and multiple SAP S/4HANA systems, develop infrastructure as code (IaC) to provision, configure, and maintain secure, scalable, and reliable cloud environments. Our ideal candidate is highly autonomous and has a strong knowledge of AWS, IaC tools and practices, integration patterns, authentication, and certificate management. The desire and ability to work in a fast-paced, collaborative environment is essential.
Key job responsibilities Design, develop, and own end-to-end delivery of scalable microservices and APIs integrating AWS services with SAP systems (S/4HANA, Ariba, SuccessFactors) using protocols such as RFC, BAPI, IDoc, OData, and REST.
Build and maintain infrastructure as code (IaC) to provision and manage the AWS infrastructure (EventBridge, SQS, SNS, Step Functions) required to support event-driven architectures and SAP integration pipelines (BTP, Integration Suite), per solution specifications.
Troubleshoot and resolve integration failures across distributed systems, ensuring high availability and data consistency.
Implement and manage authentication/authorization mechanisms (SAML 2.0, OAuth 2.0, OIDC) and identity provider configuration enabling secure SSO in hybrid environments.
Automate Certificate lifecycle management (provisioning, renewal, rotation, revocation) using ACM and AWS Private CA, including monitoring, alerting, and compliance with security standards (e.g., mTLS).
Develop and integrate AI/ML capabilities into SAP workflows using Bedrock, SageMaker, Textract, and Comprehend for intelligent automation (document processing, conversational interfaces, forecasting)
Collaborate with data engineers to build pipelines feeding SAP transactional data into ML models for anomaly detection and process optimization.
Participate in on-call rotations, drive root cause analysis, and maintain operational dashboards, alarms, and runbooks to continuously improve reliability and cost efficiency
Mentor junior engineers, drive technical decisions, and author design documents that influence the team's SAP integration and AI roadmap
Collaborate cross-functionally with SAP Basis, security, and product teams to align on requirements and delivery
Work closely with the offshore support team to coordinate issue triage and resolution, provide clear handoffs, share technical context, and improve support processes across time zones.
Develop and integrate AI/ML capabilities into SAP workflows using Amazon Bedrock, AgentCore, SageMaker, Textract, and Comprehend for intelligent automation, including building MCP (Model Context Protocol) tool servers, Fiori integration patterns (BAdI extension calls, side panel plugins, full custom agent applications), and conversational AI interfaces.
Design and build agentic AI solutions on Amazon Bedrock and AgentCore, including MCP tool servers, multi-agent orchestration, knowledge bases, and AI safety guardrails for SAP-integrated workflows.
Own the integration of AI co-pilot experiences into enterprise surfaces (Quick Suite, Fiori), ensuring secure cross-partition data flow, agent evaluation and monitoring, and alignment with the organization’s AWS-first AI strategy.
A day in the life This is an excellent opportunity to join Amazon Leo’s world class technical team working with some of the best and brightest engineers while also developing your skills and furthering your career within one of the most innovative programs.
About the team You will be joining a team of engineers responsible for building and operating the cloud infrastructure and integrations that power Amazon Leo's enterprise applications, including SAP S/4HANA and AI-driven workflows on AWS. Our work directly supports the mission of delivering global broadband access through a constellation of 3,236 satellites. We value curiosity, ownership, and collaboration; our engineers regularly contribute to architecture decisions, mentor peers, and explore emerging AWS services like Bedrock and SageMaker. You'll have the opportunity to work across distributed systems, security, and machine learning in a supportive, growth-oriented environment. Basic qualifications
- 5+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience
- 3+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby experience
- Experience with Linux/Unix
- Experience with CI/CD pipelines build processes
- Experience with AWS core services (EC2, Lambda, S3, IAM, CloudFormation, or CDK)
- Experience with load balancing technologies (ALB/NLB a plus)
- Experience with authentication protocols (SAML 2.0, OAuth 2.0, OIDC) and certificate management
- Experience with AI/ML agent frameworks, LLM-based application development, or conversational AI platforms Preferred qualifications
- Experience with distributed systems at scale
- 8+ years of experience in systems development or cloud infrastructure engineering
- Deep expertise with AWS infrastructure services (VPC, EC2, Lambda, CDK/Terraform, CloudFormation)
- Strong background in authentication and identity management (IAM, SSO, SAML 2.0, OAuth 2.0, OpenID Connect)
- Experience with certificate management at scale using AWS Certificate Manager, Private CA, and TLS/mTLS automation
- Hands-on experience with SAP on AWS (S/4HANA, BTP, Ariba) and SAP integration patterns (RFC, IDoc, OData)
- Experience applying AWS AI/ML services (Bedrock, SageMaker, Textract) to enterprise workflows
- Experience with Amazon Bedrock (AgentCore, Knowledge Bases, Guardrails) or similar agentic AI platforms
- Familiarity with Model Context Protocol (MCP), Agent-to-Agent (A2A) orchestration, or similar tool/agent interoperability patterns
- Experience with AI safety practices including prompt engineering, grounding validation, human-in-the-loop write gates, and PII handling in AI contexts
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Bellevue - 151,200.00 - 204,600.00 USD annually
