Overview

Team Description: Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

HM Team Description:
Part of Microsoft Identity and Access Management (IAM) and the Application Platform Team, we drive governance for Microsoft’s first-party applications. Our focus is on building secure, compliant, and automated processes for app identity configuration, preauthorization, and policy enforcement to ensure trust and operational efficiency across the Entra ecosystem.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

Coding

•  Uses debugging, tests, logs, and telemetry to proactively verify assumptions and prevent production issues and conducts incident retrospectives, implements fixes, and prevents recurrence with minimal supervision. 
•  Reviews code for standards, test coverage, diagnosability, reliability, and maintainability.
•  Coaches others and provides feedback to improve code quality.
•  Writes extensible and maintainable code, applies best practices, and escalates blockers as needed.
•  Considers diagnosability, reliability, and maintainability in all code.

 Design

• Provides feedback on architecture proposals and explores design options with minimal supervision.
• Collaborates on solution architecture and develops design documents.
• Ensures performance, scalability, resiliency, cost, and compliance in designs.

• Escalates findings and helps inform engineering decisions.
• Creates test strategies, executes security tests, and improves test coverage and reliability. 
• Leverages AI tools for test automation.
• Identifies dependencies, collaborates with other teams, and understands system interactions.

 Engineering Excellence

• Contributes to automation in deployment, targeting zero-touch deployment when possible.
• Runs code in non-production environments to confirm functionality.
• Applies secure design principles and best practices for scaling, performance, and compliance.
• Shares knowledge, identifies tool gaps, and reuses open source or internal code responsibly.
• Implements security best practices, monitors for violations, and works with security partners to define and validate security promises. Incorporates deployment gates and security monitoring.
• Ensures processes for security, privacy, safety, and accessibility are followed.
• Maintains awareness of global and local regulations.

Implementation & Deployment 

• Reviews and executes project and release plans, breaks down work items, and ensures security in planning.
• Supports safe deployment practices, monitors dependencies, and establishes rollback plans.
• Conducts experiments using feature flags and collaborates on success metrics.
• Builds deployment infrastructure for production-like testing. 

Reliability and Supportability 

• Maintains live site operations, responds rapidly to incidents, and mitigates issues efficiently. Improves troubleshooting guides (TSGs) and support documentation.
• Integrates logging and telemetry for monitoring, analyzes data to improve system health, and considers privacy implications.
• Acts as a Designated Responsible Individual (DRI), responds to incidents within SLAs, and escalates as needed.

Understanding User Requirements

• Works with stakeholders (e.g., product managers, security/privacy experts) to determine and clarify customer and user requirements.
• Incorporates customer insights and feedback into future designs or fixes, ensuring solutions align with user needs.
• Advocates for security and privacy needs throughout the development process, ensuring compliance and user trust. 

Qualifications

• Required: Bachelor’s Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Preferred: Experience with building a product or a product feature from start to the end of the product lifecycle.

Additional or preferred qualifications: Master’s Degree in Computer Science or related technical field AND 3+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor’s Degree in Computer Science or related technical field AND 5+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.