We are seeking an experienced Director to lead our PKI and Certificate Services organization. In this role, you will be responsible for delivering enterprise-grade cryptographic services and certificate management solutions that enable secure communications across Amazon and customer environments. You will own the P&L, end-to-end strategy, execution, and operational excellence for certificate services at scale, during the industry's most significant transformation: the migration to post-quantum cryptography.
Key job responsibilities Define and execute the long-term vision, strategy, and roadmap for PKI and Certificate Services Drive business outcomes including growth, adoption, reliability, and customer satisfaction Establish success metrics; own P&L accountability for the service portfolio Oversee the design and delivery of cryptographic services across : Public and private certificate authority (CA) infrastructure Certificate lifecycle management (issuance, renewal, revocation) Key management and HSM integration TLS/SSL certificate automation and deployment Code signing and identity certificate services Ensure compliance with industry standards (WebTrust, CA/Browser Forum, NIST, FIPS) Drive innovation in certificate automation, crypto-agility, and post-quantum readiness Build, lead, and develop a high-performing organization of 100+ engineers and Product Managers Foster a culture of operational excellence, security-first thinking, and customer obsession Manage organizational health, performance, and career development Ensure 99.99%+ availability and reliability of certificate services Own incident response, root cause analysis, and continuous improvement processes Establish and maintain security controls, audit readiness, and compliance posture Drive automation to reduce toil and improve operational efficiency Build relationships with external stakeholders including auditors, browser vendors, and industry bodies Represent the organization in industry forums and standards bodies
About the team The Identity, Cloud Governance, Certificate Services and PKI team is one of the most critical and foundational organizations within AWS. We own the services that enable customers to securely manage their AWS environments at scale: AWS IAM, IAM Identity Center, Access Analyzer, AWS Organizations, AWS Account, AWS Config, Control Tower, Private CA, ACM, Secrets Manager, Cognito, and Directory Services.
Our team is responsible for three core pillars that underpin every customer's AWS experience: • Identity and Access Management: Enabling secure authentication and fine-grained authorization across AWS • Cloud Governance: Providing customers with the tools to manage, organize, and govern their AWS environments at scale • PKI and Certificate Services: Delivering cryptographic services and certificate management for secure communications
Basic Qualifications
12+ years of technology leadership experience, with significant exposure to enterprise systems. Bachelor’s or master’s degree in computer science, computer engineering, or a related technical field. Proven track record of leading high-velocity engineering and product organizations. Deep understanding of cloud architectures. Strong business acumen and ability to engage with executive-level stakeholders. Ability to learn quickly and adapt to new technologies and environments. Excellent communication and collaboration abilities.
Preferred Qualifications
Experience building Tier-0 or Tier-1 issue management, devops, paging, and knowledge discovery services Experience in use of Generative AI and agents to streamline software development and operation Deep knowledge of software project management methodologies, mechanisms, and reporting Experience with AI/ML technologies and their practical applications.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, WA, Seattle - 264,100.00 - 350,000.00 USD annually