Overview

Identity & Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end-to-end, simplified solutions. The Microsoft Identity & Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

The Secrets Management and Public Key Infrastructure team of the Microsoft’s Security & Identity organization is responsible for mission critical security services that serve as the foundational building blocks of secure cloud infrastructure. We are rapidly innovating and modernizing our distributed cloud-scale secrets & key management platforms adopting the latest innovations of confidential compute, next-generation Hardware Security Module (HSMs) & quantum cryptography.

We seek a Principal Software Engineer – Identity & Security with cloud-scale distributed systems experience. You will lead engineering teams in strategy, design, and implementation of scalable, secure, resilient solutions, and drive platform modernization and migration for existing workloads. You will have an opportunity to work across team and organization boundaries in delivering impactful solutions across the foundations of Microsoft’s Security, Identity, Cloud & AI platforms.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

#MSFTSecurity

#secretspki

Responsibilities

• Architect, design, and deliver world‑class Key Management & Distribution systems that protect & secure credentials and seamlessly manage their end-2-end lifecycle without human touch.
• Evolve & migrate existing platforms to adopt latest innovations in security across both hardware & software dimensions.
• Lead systemic Single Point of Failure (SPOF) analysis and recovery engineering to ensure high availability and fault tolerance. Execute change management with a focus on zero customer impact during deployment and rollout of critical systems.
• Drive Engineering Excellence initiatives focused on improving observability, system performance, resilience, and reliability.
• Drive improvements in detection, response, and resolution times for service incidents to enhance overall reliability and customer trust.
• Deliver services that meet business continuity planning (BCP) requirements and recovery objectives.
• Improve onboarding experiences through declarative customer intent driven workflows. Automate cloud & geo expansion of critical foundational infrastructure.
• Build on our Microsoft principles (create clarity, generate energy, deliver success) and values (respect, integrity, accountability) to effectively collaborate and make things happen.

Qualifications Required Qualifications:

• Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.

Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

• 5+ years of experience working with backend storage layer solutions (e.g. SQL Server).
• 5+ years of experience working on cloud infrastructure, familiarity with data-center topologies, availability zones resiliency models, networking concepts surrounding load balancers, gateways, throttling & routing will be preferred.

Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $139,900 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.