Larry Zhang

About Larry Zhang

Executive Summary:Senior Engineering & Security Leader with 20+ years of experience building and securing AI-driven, cloud-native, and large-scale distributed platforms powering multi-billion-dollar businesses at Amazon, Capital One, and Fidelity.I lead globally distributed engineering organizations that deliver GenAI platforms, agentic AI systems, and high-availability supply chain technologies supporting $2.9B+ in revenue, 250M+ annual shipments, and 230M+ Prime customers — with security embedded at every layer.At Amazon and Capital One, security is foundational to how I build and operate platforms. I partner directly with InfoSec teams on threat modeling, penetration testing, and application security. I\'ve managed embedded security engineers within my organizations and built DevSecOps platforms that enforce compliance automation (PCI-DSS, SOX) at enterprise scale.Proven track record in:• AI-first platform strategy and enterprise cloud architecture• Cloud security architecture, DevSecOps, and compliance automation• 0→1 product development, including Buy with Prime and AI-enabled supply chain platforms• Driving $140M+ in cost savings via scalable modernization and automation• Building and scaling high-performing engineering cultures focused on innovation, operational excellence, and long-term velocityI combine deep technical expertise with organizational leadership to deliver secure, resilient platforms that enable business growth and transform customer experience.Core Competencies:• Generative AI & Agentic AI Platforms (LLMs, Claude Code, Cline, Kiro/Amazon Q, MCP, QuickSuite, Amazon Bedrock, Strands Agent)• Cloud Security Architecture & DevSecOps• Application Security, Threat Modeling & Penetration Testing• Compliance Automation (PCI-DSS, SOX, FedRAMP)• IAM, Authentication & Zero Trust Architecture• Scalable Distributed Systems• Cloud Architecture (AWS)• E-commerce Platforms & Payments Systems• Supply Chain Technology & Fulfillment Platforms• Container & Kubernetes Security• Developer Experience / DevOps / SRE• Engineering Strategy, Org Leadership & Roadmapping• Large-Scale System Design & Modernization

Experience

1. Senior Software Development Manager

   Amazon

   Sep 2020 — Present · Arlington, VA, US

   Worldwide Stores (Sep 2024 – Present)• Lead a global engineering org delivering GenAI and AI-driven platforms powering a $2.9B on-demand supply chain supporting 250M+ units shipped annually.• Define and execute multi-year strategy for scalable, cloud-native AI platforms, achieving $140M in CAPEX savings through modernization and automation.• Ensure security posture through Amazon\'s \"Security is Job Zero\" framework — threat modeling, security design reviews, and pen testing for every production launch.• Partner with InfoSec on application security assessments for AI platforms. Manage embedded security engineers within the org.• Lead adoption of next-gen AI including Claude Code, Kiro/Amazon Q, Amazon Bedrock, and Strands Agent.• Oversee Operations Review, Tech Design Review, MBR, and Talent Review mechanisms.• Champion an AI-first engineering culture, driving modern best practices and improving organizational health.Buy with Prime Technology (Oct 2021 – Aug 2024)• Launched Buy with Prime across Amazon, Shopify, Salesforce Commerce Cloud, and PayPal — enabling Amazon\'s entry into the $700B U.S. DTC market for 230M+ Prime members.• Built highly available, low-latency commerce platforms (Ordering, Payments, Tax, Promotions) under strict PCI-DSS compliance with security controls including encryption, tokenization, and automated security testing in CI/CD pipelines.• Led threat modeling and security design reviews across complex integration points with third-party payment processors and merchant ecosystems.• Scaled platforms to support rapid adoption while maintaining strict availability and performance SLAs.AWS Identity (Sep 2020 – Oct 2021)• Led teams building massively scalable IAM services powering auth for all AWS services — core Zero Trust infrastructure at global cloud scale.• Partnered with AWS Security on threat modeling, pen testing, and security architecture reviews for mission-critical identity infrastructure.

Education

• Project Management Institute (PMI)

  PMP, Project Management

  2005 — 2005

• Virginia Tech

  Master, Computer Science

• Purdue University

  Master

Skills

• Devops
• Program Management
• Retail
• Google Cloud Platform
• Jenkins
• Software Development
• Python
• Software Development Life Cycle (Sdlc)
• Integration
• Continuous Integration
• Requirements Analysis
• Cloud Computing
• Government
• Github
• Sdlc
• Web Development - Drupal, Ruby on Rails
• Healthcare
• Enterprise Software
• Docker
• Continuous Delivery
• Creative Strategy
• Chef
• Project Management
• Higher Education
• Linux
• Git
• Web Development
• Business Analysis
• Creative Problem Solving
• Business Intelligence
• Amazon Web Services (Aws)
• Crm