Sr Technical Program Manager, Proactive Security (Level 6)
Amazon · Herndon, Virginia, USA ·
- Seniority
- Senior
- Category
- Project management
Cryptographically relevant quantum computers could break the classical cryptography that protects the confidentiality and integrity of Amazon customers' data. As the industry accelerates its post-quantum cryptography (PQC) readiness timelines, Specialized Business Security (SBS) must reason about and migrate an unusually diverse portfolio: devices already in customers' homes, future devices, protected content on third-party devices, and customer traffic across satellite and ground infrastructure. As Technical Program Manager for the SBS-wide PQProgram, you will own the cross-cutting PQC problems shared across teams and turn a fast-evolving, ambiguous space into clear tracked plans, and measurable readiness outcomes.
Key job responsibilities
- Own the end-to-end PQC journey for shared crypto problems: code signing, PKI infrastructure, Crypto Bill of Materials (CBOM), and PQC migration of backend services.
- Coordinate PQC work across Amazon organizations, importing and exporting reusable techniques and artifacts so related hardware and software efforts build on each other rather than in isolation.
- Enumerate PQC readiness across device-relevant industry standards (Matter, Bluetooth, OAuth 2.0, DRM), clarify each standard's trajectory, and drive informed next steps with product and security teams.
- Define program strategy, objectives, and success metrics; align stakeholders; and drive delivery across engineering teams while navigating crypto trade-offs, including device form-factor constraints (limited RAM/ROM/CPU).
- Run recurring program business reviews, proactively identify and mitigate risk, and write and present narratives to senior leadership.
A day in the life
You review PQProgram metrics, then facilitate a design discussion on PQC migration for a constrained device, weighing algorithm options against RAM/ROM/CPU limits. You join a cross-organization working session to reuse a PQC approach already solved elsewhere in Amazon, draft a section of an upcoming leadership review, and update the standards tracker. Some days you drive execution on a well-defined problem; others you convert genuine ambiguity into a plan the org can follow.
About the team
SBS Core secures a diverse set of Amazon businesses, working backwards from what products need to be secure. The SBS-wide PQProgram coordinates and executes the post-quantum cryptography work shared across these businesses. We value clear thinking, learning quickly in an evolving field, and taking ownership of hard, ambiguous problems that grow more important as the quantum timeline accelerates.
Key job responsibilities
- Own the end-to-end PQC journey for shared crypto problems: code signing, PKI infrastructure, Crypto Bill of Materials (CBOM), and PQC migration of backend services.
- Coordinate PQC work across Amazon organizations, importing and exporting reusable techniques and artifacts so related hardware and software efforts build on each other rather than in isolation.
- Enumerate PQC readiness across device-relevant industry standards (Matter, Bluetooth, OAuth 2.0, DRM), clarify each standard's trajectory, and drive informed next steps with product and security teams.
- Define program strategy, objectives, and success metrics; align stakeholders; and drive delivery across engineering teams while navigating crypto trade-offs, including device form-factor constraints (limited RAM/ROM/CPU).
- Run recurring program business reviews, proactively identify and mitigate risk, and write and present narratives to senior leadership.
A day in the life
You review PQProgram metrics, then facilitate a design discussion on PQC migration for a constrained device, weighing algorithm options against RAM/ROM/CPU limits. You join a cross-organization working session to reuse a PQC approach already solved elsewhere in Amazon, draft a section of an upcoming leadership review, and update the standards tracker. Some days you drive execution on a well-defined problem; others you convert genuine ambiguity into a plan the org can follow.
About the team
SBS Core secures a diverse set of Amazon businesses, working backwards from what products need to be secure. The SBS-wide PQProgram coordinates and executes the post-quantum cryptography work shared across these businesses. We value clear thinking, learning quickly in an evolving field, and taking ownership of hard, ambiguous problems that grow more important as the quantum timeline accelerates.