Principal AI Security SA, AWS Security & Networking

Application deadline: Aug 26 2026

Amazon Web Services (AWS) is seeking a Principal AI Security Solutions Architect to define and drive technical strategy for secure AI adoption and AI-enabled security outcomes across North America. You will work with CISOs Chief AI Officers security leaders enterprise architects and builders as they move generative AI and agentic systems into production.

Customers need security architectures that support the speed and autonomy of AI systems while preserving control over identities data permissions software supply chains and runtime actions. Security organizations are also evaluating how AI can improve detection investigation vulnerability prioritization remediation and analyst productivity. You will help customers make sound decisions across both areas define measurable outcomes and carry the lessons from individual engagements into guidance that serves the broader field.

You will operate across organizational boundaries and in areas where the business objective technology strategy and solution design remain ambiguous. You will align account teams security and AI specialists service teams partners and field communities around a coherent technical direction. Your work will produce reference architectures decision frameworks assessments customer offerings and operating mechanisms that other Solutions Architects can apply consistently.

This is a customer-facing Principal Solutions Architect role. Success requires the ability to move between executive strategy and deep architecture influence product and field priorities with customer evidence and build mechanisms that continue producing results without direct involvement from the role holder.

Key job responsibilities
- Own the multi-year technical strategy for Security AI across the AGS Security & Networking SA Team including priorities architectural positions field mechanisms success measures and cross-organization dependencies.
- Advise senior customer leaders on security strategy for AI adoption translating business goals and risk tolerance into clear architecture decisions governance models investment priorities and measurable outcomes.
- Lead significantly complex customer engagements involving generative AI and agentic systems including agent identity least privilege data protection prompt and context risks retrieval security memory tool and connector access software supply chain risk adversarial testing runtime monitoring incident response and auditability.
- Define architectures for applying AI to security workflows such as detection triage investigation vulnerability prioritization security posture analysis remediation and control validation. Establish evaluation criteria for accuracy safety explainability human oversight and operational impact.
- Turn recurring customer problems into repeatable field mechanisms including reference architectures decision frameworks assessments workshops reusable demonstrations implementation guidance engagement qualification and escalation paths.
- Establish outcome measures that connect technical work to reduced risk faster secure deployment improved detection or response customer adoption field reuse and product improvement. Use these measures to adjust strategy and resource focus.
- Build durable working relationships across AWS security and AI service teams AGS field organizations the Security and AI/ML Technical Field Communities account teams Professional Services Support and AWS Partners.
- Gather evidence across customers and use it to influence product strategy roadmap priorities service integration documentation and field investment. Represent customer requirements in product narratives and senior leadership reviews.
- Create executive and technical narratives that give customers and AWS teams a clear point of view on secure AI adoption and AI-enabled security. Represent AWS in customer forums and industry events where deep technical judgment is required.
- Develop Principal-level technical capability across the SA community through mentoring architecture reviews content standards technical assessments and communities of practice.
- Identify emerging security risks and capability gaps early determine which require customer guidance field education partner engagement or product investment and lead the right organizations toward resolution.
- Serve as an escalation point for high-impact customer decisions where AI architecture security risk business priorities and multiple AWS organizations intersect.

A day in the life
A day may begin with a CISO and Chief AI Officer working session on the control model for production agents that can access sensitive data and take actions through external tools. You may then review a proposed reference architecture with security and AI service teams resolve conflicting design assumptions and document the decision criteria for field use.

Later you may examine results from customer engagements to identify a recurring gap in agent identity AI workload detection or AI-assisted investigation. You will decide whether the right response is a customer offering a reusable architecture a field enablement mechanism a partner pattern or product feedback. You may close the day mentoring a Principal candidate reviewing an executive narrative or presenting a data-backed investment recommendation to Directors and VPs.

About the team
The AGS Security & Networking SA Team is part of AWS Customer Solutions & Scale Innovation within AGS NAMER Tech. The team includes Solutions Architects across the United States and Canada who help customers connect and operate applications securely and resiliently on AWS.

Our mission is to accelerate customers confidence in the cloud through secure and well-connected operations. We work directly with customers account teams service teams and partners to solve complex security and networking problems create reusable guidance and turn field evidence into improvements across AWS. The teams 2026 AI security goal covers both security for AI and AI for security with an emphasis on opinionated guidance direct customer work and mechanisms that scale beyond one contributor.

- 10 years of specific technology domain areas (e.g. software development cloud computing systems engineering infrastructure security networking data & analytics) experience
- Bachelors degree in computer science engineering mathematics or equivalent
- Experience developing technology solutions and evangelising end-to-end technology roadmaps that guide IT transformations toward cloud computing
- Experience communicating across technical and non-technical audiences and at C-level including training workshops publications
- Experience in specific technology domain areas like software development cloud computing systems engineering infrastructure security networking data and analytics

- Knowledge of distributed systems design and implementation or equivalent
- Knowledge of large scale automation and workflow management or equivalent
- Knowledge of presentations and whiteboarding skills with a high degree of comfort speaking with internal and external executives IT management and developers
- Experience architecting migrating transforming or modernizing customer requirements to the cloud
- Experience in one or more of the following: application security frameworks security code reviews incident response security infrastructure penetration testing mobile security cloud security AI security identity and access controls

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees supervisors and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees supervisors and staff to ensure exceptional customer service; and follow all federal state and local laws and Company policies. Criminal history may have a direct adverse and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above as well as the abilities to adhere to company policies exercise sound judgment effectively manage stress and work safely and respectfully with others exhibit trustworthiness and professionalism and safeguard business operations and the Companys reputation. Pursuant to the Los Angeles County Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.

Pursuant to the San Francisco Fair Chance Ordinance we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at CA San Francisco - 210200.00 - 284300.00 USD annually
USA CO Denver - 182800.00 - 247300.00 USD annually
USA NY New York - 201000.00 - 272000.00 USD annually
USA VA Arlington - 182800.00 - 247300.00 USD annually
USA WA Seattle - 182800.00 - 247300.00 USD annually