AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help.

You’ll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You’ll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you’ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.

AWS Global Accelerator provides customers a global anycast network on-ramp, routing and load-balancing traffic through AWS edge locations onto the AWS backbone — bypassing the unpredictability of the public internet. Every packet for Global Accelerator customers that enters any AWS edge location flows through our packet processor, a high-performance DPDK-based application that makes real-time forwarding and mitigation decisions at line rate.

The Packet Processing team is looking for an experienced systems engineer to help build and scale our data plane — with a particular emphasis on network security and DDoS resilience. You'll work across the full packet processing stack: forwarding, load balancing, connection tracking, and traffic mitigation, all within the tight latency and throughput constraints of a Tier-0 service running across 100+ global points of presence.

Key job responsibilities

• Design and build high-performance DDoS mitigation systems operating in the kernel fast-path and userspace data plane
• Develop eBPF/XDP programs for early-stage packet filtering and traffic classification at wire speed
• Extend our DPDK-based packet processor with new mitigation primitives (SYN proxying, rate shaping, connection tracking)
• Analyze attack traffic patterns and translate observations into automated, scalable defenses
• Own the full lifecycle — from design through production operation — of security-critical infrastructure serving global traffic
• Collaborate with AWS Shield, CloudFront, and networking teams on coordinated mitigation strategies

About the team
The AWS Global Accelerator team builds and operates a globally distributed networking service that improves application performance and availability for customers worldwide. Leveraging AWS's global network of 130+ Points of Presence across 53 countries, we route user traffic through optimized paths to deliver faster, more reliable experiences. Our team tackles complex challenges in anycast networking, traffic engineering, and fault-tolerant distributed systems at massive scale. We're passionate about making the internet faster and more dependable for millions of end users.