Senior AWS Platform Engineer

Why SailPoint? 

SailPoint is the leading, AI-driven security platform providing the autonomous governance that best solves the needs for the modern enterprise. By harnessing the power of AI and machine learning, SailPoint automates and streamlines the complexity of delivering the right access to the right identities and technology resources at the right time. Delivered at the scale our enterprise customers demand. 

We are proud of our team and the culture we have built which has led to our employees voting us "best places to work" – 15 years in a row. 

What You’ll Do: 

Operating at the intersection of Product Engineering, Sales and Strategic Adoption, the Senior AWS Platform Engineer helps build and evolve SailPoint Agentic Acceleration (SAA) — SailPoint’s internal platform for migrating enterprise customers from IdentityIQ to SailPoint Identity Security and other strategic goals. Working closely with the team’s technical lead and architect, you will contribute to the technical direction of a modern, AI-augmented full-stack platform (Angular 20 SPA + FastAPI on AWS Fargate) and spend most of your time hands-on, delivering features across the front-end, back-end, and cloud infrastructure layers. You will partner with product and operations stakeholders to translate complex migration requirements into elegant, scalable solutions that accelerate customer time-to-value at SailPoint scale. 

Senior AWS Platform Engineers at SailPoint embark on their journey by developing a deep understanding of the IdentityIQ-to-SIS migration lifecycle, SailPoint Agentic Acceleration’s (SAA) technical architecture, and the tooling ecosystem their team depends on. 

• Within the first two months, you will ramp up on the current SAA codebase, get comfortable with the team’s engineering practices and tooling, and begin delivering meaningful feature and infrastructure improvements. 

• After the first six months, you will have contributed to at least one significant architectural initiative, strengthened the platform’s CI/CD and testing practices, and become a go-to engineer for one or more core areas of the SAA platform. 

• By the end of your first year, you will be a trusted senior engineer on the team — independently owning features end to end, mentoring less-experienced engineers, and helping steer the platform toward increased automation, reliability, and developer velocity. 

Responsibilities: 

• Contribute to the technical architecture of the SAA web application (Angular 20 SPA, FastAPI, AWS CDK infrastructure) and participate in significant design decisions 

• Mentor less-experienced front-end, back-end, and infrastructure engineers; conduct code reviews and help uphold engineering standards 

• Deliver hands-on development across the full stack as a core contributing engineer — this is a builder role, with most of your time spent writing and shipping code 

• Help execute the technical roadmap for the SAA platform in partnership with the technical lead, product, and operations stakeholders 

• Design, build, and maintain RESTful and streaming API services (FastAPI + SSE) deployed on AWS Fargate 

• Build and maintain Angular 20 front-end features using the SailPoint Armada design system 

• Develop and maintain AWS infrastructure-as-code using AWS CDK (DynamoDB, S3, SQS, CloudFront, Cognito, Bedrock, Fargate, API Gateway, Lambda, EventBridge, KMS) 

• Develop and maintain Bedrock-backed AI agents (Lumen, Builder, Lantern) and contribute to the shared Python wheel library ecosystem 

• Write and maintain automated tests (Karma/Jasmine for frontend; pytest for backend) and help maintain CI/CD workflows (GitHub Actions, CodeArtifact) 

• Collaborate with SailPoint’s product, migration, and customer success teams to translate migration requirements into platform capabilities 

• Contribute to operational excellence — observability, structured logging (structlog), security (Cognito JWT tiered auth, KMS), and cost efficiency across the AWS environment 

• Improve developer productivity by using and helping evaluate agentic coding tools and AI-assisted development workflows 

• Help troubleshoot and resolve complex technical issues, and support teammates on challenging problems across the SAA platform 

• Interactions with customers, sales teams, and delivery organizations are an expected part of this role, based on demand from our largest and most strategic sales opportunities. 

Requirements: 

• 5+ years of professional software engineering experience building and shipping production software; experience mentoring other engineers is a plus 

• Strong TypeScript and Angular development skills (v15+); solid command of reactive programming with RxJS 

• Strong Python (3.10+) and FastAPI skills; solid experience building production REST and streaming APIs 

• Hands-on experience with core AWS services such as Fargate/ECS, DynamoDB, S3, SQS, CloudFront, Cognito, API Gateway, Lambda, EventBridge, and KMS 

• Hands-on experience with AWS CDK (Python) or comparable infrastructure-as-code tooling (Terraform, Pulumi) 

• Strong understanding of authentication and authorization patterns (OAuth2, JWT, Cognito user pools and groups) 

• Experience working with CI/CD pipelines (GitHub Actions or equivalent) 

• Solid understanding of asynchronous Python (asyncio, aiobotocore) and server-sent events (SSE) streaming patterns 

• Ability to communicate technical trade-offs to non-technical stakeholders and collaborate effectively on architecture decisions 

• Excellent written and verbal communication skills 

• Experience with agentic coding tools such as Cursor, Claude Code, GitHub Copilot, or OpenAI Codex 

Preferred: 

• Experience with the SailPoint IdentityNow/ISC or IdentityIQ platform 

• Familiarity with Amazon Bedrock, LLM agent patterns, and retrieval-augmented generation (RAG) 

• Python packaging and private package registry experience (AWS CodeArtifact or similar) 

• Experience with Chart.js or similar data visualization libraries in a TypeScript context 

• Familiarity with document generation tooling (jsPDF, html2canvas, JSZip) 

• Experience with NoSQL data modeling for DynamoDB (single-table design, GSIs) 

• Background in identity governance, access management, or security software 

• Experience building or maintaining internal tooling platforms for enterprise migration or onboarding workflows 

• Experience with project management duties (project planning, resource management, scope, schedule and status reporting) 

• Experience with quality assurance duties (usability testing, performance testing, automated testing, test plans) 

Education: