SeniorSoftwareDevelopmentEngineer,AdsAgentIdentityandAuthorizationInfrastructure

We're building the trust and security layer for AI agents on Amazon Ads. As agents become the primary interface for advertisers and partners, we need infrastructure that gives every agent a unique identity, scoped permissions, and a complete audit trail — while giving advertisers full control over what agents can do on their behalf. This is a new strategic investment area and we're assembling the founding team: Sr. SDEs, SDM, and PMT. We're looking for a Senior Software Development Engineer to design and build agent-native identity and authorization infrastructure at Amazon scale. You'll own critical systems that evaluate every API call from every agent on the platform — deciding in real time whether an agent is authorized to take an action, enforcing capability-scoped permissions, and producing audit trails that give advertisers confidence in agentic workflows. This is greenfield work in a space no one in the industry has solved. Key job responsibilities - Design and build authorization infrastructure that evaluates agent permissions at the API layer, enforcing capability-scoped access in real time at low latency and high availability. - Own the technical vision for agent authentication flows including delegation mode, autonomous mode, and machine-to-machine auth with short-lived tokens. - Build the agent registry system that issues unique identities to 1P and 3P agents, captures declared capabilities, and integrates with downstream enforcement. - Design agent-to-agent delegation protocols including scoped tokens and chain-of-trust verification. - Drive operational excellence across Tier-1 services handling millions of authorization decisions daily. Influence the broader system architecture across 10+ dependent teams, ensuring authorization integrates cleanly with the Ads Agent platform. - Use AI-powered development tools daily to accelerate your own engineering work. A day in the life You might start the morning reviewing a design for how 3P agents authenticate un