Overview

About the Team:

Consumer Copilot Security is at the core of Microsoft's mission to deliver trusted, human-centered AI experiences. We make security and resilience intrinsic to every Copilot interaction—across devices, platforms, and ecosystems. Our work spans secure identity flows, defenses against emerging threats like prompt injection, and privacy-first systems that scale globally.

About the Role:

Copilot for consumers depends on a rock-solid identity and isolation foundation that makes personalized AI experiences safe and seamless across Windows, Edge, web, and mobile. As Copilot evolves into an agential system—planning, reasoning, and taking actions on behalf of users—the identity layer must evolve with it: authenticating users across surfaces, authorizing agent actions at runtime, isolating execution contexts, and enforcing trust boundaries that hold under adversarial pressure.
We're seeking a Software Engineer II to build identity and isolation components across Copilot's stack. You'll work within a team of experienced engineers, shipping production code into a globally deployed AI platform on problems that are technically deep and often novel—how users authenticate across chained agent actions, how authorization boundaries adapt at runtime, how execution contexts stay isolated when agents share memory and data.
This role is a high-growth opportunity. You'll deepen your systems engineering skills, gain hands-on experience with identity and security at global scale, and work directly on the authentication, session management, and isolation systems that hundreds of millions of users depend on. Most early-career engineers work on mature systems with well-understood patterns. Here, the problems are new, the solutions are still being defined, and your work ships into a product operating under real-world adversarial pressure.

Why This Role Matters:

Your work will secure AI experiences for hundreds of millions of users worldwide, shaping how people trust and interact with Microsoft's most transformative products. If you're energized by solving hard problems, learning fast, and building systems that balance speed and trust at scale, this is your opportunity to grow while making a global impact.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Starting January 26, 2026, Microsoft AI (MAI) employees who live within a 50- mile commute of a designated Microsoft office in the U.S. or 25-mile commute of a non-U.S., country-specific location are expected to work from the office at least four days per week. This expectation is subject to local law and may vary by jurisdiction.

Responsibilities

• Identity & authorization components: Implement and improve authentication, session management, token handling, and authorization flows across Copilot surfaces (Windows, Edge, web, iOS, Android).
• Isolation & containment: Contribute to execution context isolation, information-flow controls, and boundary enforcement mechanisms that constrain agent behavior and protect user data.
• Cross-surface delivery: Help build and maintain common authentication patterns and SDKs that ensure consistent security controls across consumer surfaces.
• Agential identity flows: Implement authentication and authorization components for AI-powered, agential scenarios—supporting secure delegation and scoped consent for agent actions.
• Platform integration: Work with Microsoft Account and central identity teams to integrate platform capabilities into Copilot consumer scenarios.
• Quality & reliability: Write high-quality, well-tested, production-ready code. Investigate and fix bugs, improve reliability, and respond to production issues.
• Observability: Use telemetry and monitoring data to understand system behavior and identify areas for improvement.
• Collaboration: Participate in code reviews, design discussions, and threat modeling sessions. Partner with security engineers, product managers, and platform teams to deliver features end-to-end.

Qualifications Required Qualifications:

• Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• OR equivalent experience.

Preferred Qualifications:

• Master's Degree in Computer Science or related technical field AND 3+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• OR Bachelor's Degree in Computer Science or related technical field AND 5+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• OR equivalent experience.
• Experience building and shipping software in a production environment.
• Familiarity with identity concepts such as OAuth 2.0, OpenID Connect, JWT, session management, or token handling.
• Experience with cloud platforms such as Azure, AWS, or GCP.
• Exposure to security fundamentals—threat modeling, secure coding practices, or vulnerability analysis.
• Interest in AI systems, LLM platforms, or emerging AI security challenges.
• Experience with distributed systems, microservices, or API design.
• Solid debugging and problem-solving skills.
• Ability to ramp quickly in a technically deep, fast-paced environment.

#MicrosoftAI #MAIDPS

Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $100,600 - $199,000 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $131,400 - $215,400 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.