Systems Dev Engineer, ALM365, Amazon Leo

Job description

Amazon Leo is Amazon's low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, and we've designed the system with the capacity, flexibility, and performance to serve a wide range of customers, from individual households to schools, hospitals, businesses, government agencies, and other organizations operating in locations without reliable connectivity.

Export Control

This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.

The ALM365 Engineering team is accountable for the end-to-end configuration, deployment, and management of Microsoft 365 productivity services and SharePoint Server infrastructure on AWS GovCloud. Our mission is to enable seamless collaboration through secure, reliable, and highly-available services that support the daily operations of Amazon Leo.

We are seeking an experienced Systems Development Engineer to take ownership of the technical implementation of M365 services and SharePoint Server on AWS GovCloud, including monitoring, automation, and compliance integration with Leo Security and KIAM.

Key job responsibilities

- Design and implement M365 and SharePoint Server infrastructure on AWS GovCloud using Infrastructure as Code (CDK/CloudFormation)

- Configure and manage M365 services (Teams, SharePoint, OneDrive, Exchange) via Desired State Configuration (DSC)

- Enforce compliance with security principles including least-privilege access, password management, and audit logging for all productivity applications

- Partner with Leo Security and Global Trade Compliance to ensure compliance with ITAR/EAR export control requirements and NIST SP 800-53 controls

- Build automation frameworks and monitoring dashboards using PowerShell and Python to drive operational excellence and scalability

- Drive secure external collaboration solutions to support Kuiper program requirements

- Develop and maintain runbooks and engineering documentation for both technical audiences and end users

- Create and implement automated processes that reduce manual effort and increase overall efficiency

- Work closely with cross-functional teams including KIAM, Leo Security, and program planning to meet infrastructure and compliance requirements

Export Control Requirement

Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

A day in the life

As a Systems Development Engineer on the ALM365 team, you'll implement and maintain Microsoft 365 services and SharePoint Server on AWS GovCloud. You'll write PowerShell automation and CDK infrastructure code, respond to operational alarms, partner with Leo Security on compliance controls, and collaborate across team boundaries to support Amazon Leo's productivity platform — balancing hands-on engineering with export control and security requirements.

About the team

The ALM365 team owns Amazon Leo's productivity infrastructure — Microsoft 365 (Teams, SharePoint, Exchange, OneDrive), Nextcloud, SharePoint/Project Server on AWS GovCloud, and secure external collaboration services. We operate across two classified environments (KCE-Low and KCE-Mod) and partner closely with Leo Security, KIAM, and program planning to deliver compliant, highly-available collaboration tools for a satellite broadband program subject to ITAR/EAR export controls.

Small team, high ownership, meaningful infrastructure work.