Technical Program Manager for Cryptographic Infrastructure

Project Leo is an initiative to launch a constellation of Low Earth Orbit satellites that will provide low-latency, high-speed broadband network connectivity to unserved and underserved communities around the world. Amazon Leo Trust Services (ALTS) owns the cryptographic infrastructure that underpins Leo's satellite constellation, including certificate lifecycle management, key generation and provisioning, secure communications, and post-quantum cryptographic readiness.

We are looking for a Technical Program Manager to own the certificate rotation and cryptographic algorithm migration program across Leo. As the constellation scales, the cryptographic foundation must evolve with it: enabling automated certificate rotation across dozens of integration points, migrating to next-generation algorithms including post-quantum cryptography, and ensuring devices designed to operate for 15+ years remain cryptographically current throughout their lifetime. This is a rare opportunity to shape how a global satellite network maintains cryptographic trust at scale.

Key job responsibilities include:

• Owning the end-to-end program for certificate rotation and cryptographic algorithm migration across Leo's constellation infrastructure.
• Building a unified view of how certificates are consumed across 10+ integration points.
• Identifying and driving resolution of the constraints that prevent automated rotation.
• Orchestrating the cross-team work required to deliver cryptographic agility.
• Partnering with hardware, firmware, ground systems, and network teams to define the out-of-band distribution workflows needed for next-generation certificate formats.
• Managing program lifecycle from requirements through delivery.
• Negotiating priorities across teams that do not share a reporting chain.
• Driving crisp decisions in ambiguous technical territory.
• Communicating progress, risks, and tradeoffs to Directors and VPs.

You will also contribute to broader ALTS programs including PKI infrastructure migration to AWS data centers, post-quantum readiness for upcoming tapeout deadlines, and deprecated service decommissions.

A day in the life will involve driving alignment across teams that each own a piece of the certificate puzzle but have never had a single orchestrator connecting their work. Some days that means facilitating a design review to define how a ground service will consume global certificates instead of regional ones. Other days it means tracking a deprecated key management service through its final migration milestones before its hard shutdown deadline. You will build and maintain the program plan that connects hardware tapeout dates, firmware release schedules, and service deployment timelines into a coherent delivery sequence. You will identify risks early, escalate effectively when teams are blocked, and write the narratives that help leadership understand why cryptographic agility matters for Leo's long-term operational security. The work is both strategic (shaping how Leo's PKI evolves over the next decade) and tactical (ensuring the next certificate rotation does not cause loss of satellite control).

The Leo Trust Services team owns the cryptographic foundation for Project Leo's satellite broadband service. We manage the keys, certificates, and secure communication protocols that protect everything from chip provisioning in manufacturing through satellite control in orbit. Our 2027 priorities center on post-quantum readiness, infrastructure resilience, and the cryptographic agility program this TPM will own.