Description

Amazon LEO is building a revolutionary satellite constellation to deliver high-speed broadband to underserved communities worldwide. As a Software Development Engineer II on the Security and Reliability (SAR) Software team, you'll write the most critical firmware that runs on every LEO satellite. Your Rust code will execute in space, handling everything from secure boot processes to cryptographic operations, running on custom silicon with zero tolerance for failure.

This isn't your typical software role. You'll work directly with hardware, debug on real silicon, and ship firmware that must operate flawlessly for 10+ years in orbit. From implementing cryptography to managing the complete boot chain, your work will protect the security backbone of a global satellite network. Join a tight-knit team of world-class engineers where you'll own significant technical surface area and see your code launched into orbit.

Key job responsibilities
- Develop low-level embedded Rust software for satellite platforms, interfacing directly with custom hardware in RTOS and bare-metal systems.
- Develop and maintain secure boot architectures and cryptographic implementations, including bootrom, bootloader chains, provisioning, hardware Root of Trust integration, and cryptography protocols
- Provide meaningful code review feedback to team members including senior engineers, ensuring high-quality software delivery across the full development lifecycle from design through deployment and maintenance
- Debug complex hardware-software integration issues using JTAG debuggers, interpreting logs, and working directly with custom ASIC designs, datasheets, and real hardware test boards
- Lead operational excellence initiatives for space-based systems, identifying root causes of issues, implementing permanent fixes, and maintaining reliability standards for firmware running on thousands of satellites

Export Control Requirement:
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

A day in the life
You'll start your morning in standup hearing updates on high-profile fixes or bootrom feature implementations, then dive into deep work writing Rust code for new features / commands or debugging boot failures on hardware test boards using debuggers. Your afternoon might include cross-team syncs with ASIC engineers on calibration values, reviewing teammates' code for signing tools, or investigating why tests behave differently across silicon revisions. You'll wrap up by analyzing production telemetry to ensure fleet-wide OTA success, writing design documents for handling hardware variations, or preparing builds for validation teams.

About the team
SAR Software is a specialized team of embedded software engineers within LEO responsible for the most security-critical firmware on every satellite. We own the full trust chain from boot ROM through runtime systems, including secure boot, cryptography, OTA updates, and telemetry on custom ASIC hardware. Our stack centers on embedded Rust, FreeRTOS, ARM platforms, and hardware-backed cryptography.

The team is highly selective and deeply technical, with a strong culture of engineering rigor, thoughtful design review, and end-to-end ownership. Engineers work directly with hardware test boards, JTAG debuggers, and real silicon while solving complex challenges in secure systems and applied cryptography. From architecture through orbital deployment, every team member has meaningful influence on both the technical direction and the firmware that underpins global satellite communications.