Software Development Engineer II, AWS SMGS- Galaxi

Build the systems that make AI agents secure, governed, and trustworthy at scale. The AWS SMGS-Galaxi team builds intelligent, AI-powered services that help thousands of internal users discover, secure, and govern information assets across AWS. Our platform serves as the central nervous system for data intelligence, connecting teams with the assets they need while ensuring security, compliance, and operational efficiency at enterprise scale. We are looking for a Software Development Engineer who wants to solve hard problems at the intersection of data security, access governance, and agentic automation. You will design and deliver scalable, production-grade services that give AI agents the ability to discover, access, and act on sensitive data while enforcing fine-grained security and compliance at every layer. You will work across the full stack: backend distributed systems, event-driven architectures, intelligent MCP interfaces, and frontend micro-applications. Your work will directly impact thousands of users who rely on our platform for critical business decisions daily. You will own services end-to-end, from architecture through deployment and operational excellence, in a fast-paced, high-ownership environment where security is not an afterthought but the core product. Key job responsibilities • Build secure, scalable distributed systems on AWS (Lambda, Neptune, DynamoDB, API Gateway, S3, Step Functions) via CDK • Develop multi-agent AI systems using Bedrock Agents, MCP, knowledge graphs, vector embeddings, and RAG • Implement zero-trust access control — IAM role chaining, ABAC, tenant isolation, and least-privilege agent-to-service auth • Build MCP servers (TypeScript/Python) with authorization boundaries, audit logging, and data classification enforcement • Architect observability for AI agents — invocation auditing, access pattern analysis, and lineage tracking • Drive operational excellence through threat modeling, security scanning, monitoring, and incident response • Collaborate across teams on system design, code reviews, and technical strategy A day in the life Every day brings a different challenge. You might be designing an API in the morning, debugging a distributed system in the afternoon, and reviewing a teammate's design by end of day. You'll partner with engineers across AWS to solve complex, ambiguous problems spanning customer-facing features, system performance, and cross-team integrations. We look for curious, pragmatic builders with a bias for action. You'll have real ownership from day one and the environment to grow your technical depth, influence, and leadership over time. About the team Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform, serving millions of customers across virtually every industry. Within AWS, the Sales, Marketing, and Global Services (SMGS) organization drives growth by helping customers of all sizes adopt and succeed with AWS services. The Galaxi Team, part of SMGS, builds and operates the Galaxi portal (galaxi.aws.dev), a centralized hub that enables ~1,500 users across AWS to discover, access, and govern 500+ data assets. The team owns six core services: the Galaxi Portal (unified UI via micro-frontend architecture), Data Catalog (search and discovery across Glue, Redshift, S3, QuickSight, and streaming assets), Access Manager (fine-grained subscription and security controls), Group Service, RLS Service, and MetricsLab (standardized metric definitions and governance). Together, these services form the backbone of data intelligence for AWS sales and business teams, ensuring the right people have secure, governed access to the right data at the right time. About AWS Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative ex…