Every device in an Amazon fulfillment center-cameras, robots, conveyors, scanners-needs a network connection to operate. Before any device can communicate, it needs a dedicated network segment: a VLAN with a subnet and IP address assigned, security rules configured, and connectivity verified. Multiply that across 2,500+ fulfillment sites worldwide, each running dozens of solutions, and you begin to see the scale of the problem this team solves.
You will lead a team of 6 engineers who own the service that manages this entire lifecycle. Your service is the single source of truth for every network segment across Amazon"s fulfillment network. When a new solution needs connectivity, your APIs allocate the segment. When a site launches, your system pre-stages the network before anyone asks. When security policies change, your service enforces them across the fleet.
Today, this system works-but it requires too much human involvement. Every new solution needs a VLAN ready and waiting at the site before it can connect. Today, engineers manually replenish these pre-staged VLAN pools when they run out-blocking onboarding until they act. Migrations between network architectures require careful coordination because configuration files can fall out of sync. Security rule changes that should be routine have caused outages when validation gaps allowed bad state to reach production. The team has experienced real incidents where silent failures masked problems for days before they surfaced as customer-impacting outages.
Your job is to solve these problems permanently. You will lead the engineering effort to make this system predict demand and auto-replenish VLAN pools before they exhaust, detect when deployed state drifts from intended state and self-correct, migrate 680 sites to a modern network architecture while onboarding 635 retail locations into unified management, and scale a simplified security model-validated to reduce firewall complexity by 89%-across the entire fleet. You will also build the APIs that allow AI agents to query and operate on network state directly, making your service the first in this organization to be fully consumable without a human in the loop.
This is a people leadership role. You will hire, coach, and grow engineers. You will own the roadmap, make trade-off decisions, coordinate delivery across multiple partner teams, and be accountable for the operational health of a tier-1 service. You will set the technical direction for a system that, when it fails, stops packages from moving.
Key job responsibilities
A day in the life
Amazon offers a full range of benefits that assist you and eligible family members, including domestic partners. Benefits can vary by location, the number of regularly scheduled hours you work, length of employment, and job status such as seasonal or temporary employment. The benefits that generally apply to regular, full-time employees include:
Medical, Dental, and Vision Coverage
Maternity and Parental Leave Options
Paid Time Off (PTO)
401(k) Plan
If you are not sure that every qualification on the list above describes you exactly, we"d still love to hear from you! At Amazon, we value people with unique backgrounds, experiences, and skillsets. If you're passionate about this role and want to make an impact on a global scale, please apply!
About the team
The Imperium Network Traffic and Security (INTAS) team owns the Network Segmentation Service (NSS), the source of truth for network segmentation across Amazon"s 2,500+ operational fulfillment sites. NSS provides APIs that define, allocate, and lifecycle-manage every VLAN, subnet, and IP address on the fulfillment network. The team delivers network security solutions using Access Control Lists (ACLs) and VLANs deployed on networking devices, ensuring seamless connectivity for FC solutions within defined SLAs.