Senior Software Engineer

Overview

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions.

The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate.

Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Microsoft's Mission is to "Empower every person and every organization to achieve more" and Security is core to that statement. Microsoft's identity and authentication product portfolio, powered by Microsoft Entra, provide secure, seamless access to applications, devices, and data while protecting users from evolving cyber threats.

With passwordless authentication, conditional access, and AI-driven security, Microsoft enables organizations to strengthen identity protection and simplify access management. Designed for enterprises and developers alike, Microsoft’s identity platform ensures compliance, scalability, and innovation in securing digital environments.

The Identity Security team safeguards Microsoft Entra and Microsoft products by preventing, detecting, mitigating, and responding to security threats.

We’re looking for a Senior Software Engineer to build and operate the automated systems that power Identity’s security posture measurement framework. You’ll own the governance state machine — the real-time engine that evaluates risk thresholds, triggers escalations, and dispatches actions across the organization. This is a high-impact role where your code directly determines when we sound the alarm and mobilize teams.

This position requires a strong passion for technology, growth engineering, data-informed decision making, partner engagement, and most of all: customer focus. If this sounds like something you would like to do, we’d love to talk to you! In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

#MSFTSecurity, #MSFTSecurity, #Cybersecurity #EntraID #IdentitySecurity #Identity&NetworkAccess

Responsibilities

• Design and operate security state management systems that track posture, apply threshold-based logic, and drive multi-level escalation decisions
• Build automated response and remediation workflows, including incident creation, notifications, deployment safeguards, and escalation actions when risk thresholds are breached
• Own and scale core cloud-based governance platform infrastructure, ensuring high reliability, scalability, observability, and efficient processing of security signals
• Engineer escalation and prioritization mechanisms that trigger coordinated response workflows and cross-team mobilization during elevated risk states
• Develop intelligent alerting and routing systems with de-duplication, correlation, and smart routing to reduce noise and maximize actionable signal for engineering teams
• Integrate security telemetry and risk signals by partnering with data engineering to operationalize metrics and feed them into decisioning and automation workflows • Incorporate predictive risk modeling by collaborating with data science to embed forecasting and propensity models into prioritization and escalation logic
• Ensure 24/7 system reliability and resilience through robust monitoring, failover mechanisms, and self-healing capabilities
• Support incident response and rapid mitigation by building systems that enable fast adaptation, controlled overrides, and recovery during active security events Our team values diversity and strives to hire individuals with varied experiences and perspectives.

Other

• Embody our company's Culture and Values.

Additional information

We understand that no candidate possesses every desired skill and experience, but together, we form a strong, effective team.

Required/minimum qualifications

• Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
• OR equivalent experience.

Other Requirements

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

• Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
• Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local [or applicable country] government agency customers and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified via a valid passport.

Preferred Qualifications

• 5+ years of professional software engineering experience building, deploying, and operating production services
• Strong experience in distributed systems with a focus on reliability, scalability, performance, and operational excellence
• Proficiency in at least one systems or backend language (Python, Go, C#, or TypeScript)
• Experience designing and building automation, platform, or reliability engineering solutions
• Hands-on experience with event-driven architectures, workflow orchestration, or state machine–based systems
• Familiarity with Azure cloud services (e.g., Azure Functions, Logic Apps, Event Grid, Service Bus) or equivalent platforms
• Experience with infrastructure-as-code (Terraform, Bicep, ARM templates, or similar)
• Strong understanding of secure system design, including threat modeling, secure coding practices, and access control
• Demonstrated technical leadership, including driving architecture decisions, aligning stakeholders, and delivering complex end-to-end solutions

#MSFTSecurity, #Cybersecurity #EntraID #IdentitySecurity #Identity&NetworkAccess

Pay and benefits

Software Engineering IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.