Principal Software Engineer Manager at Microsoft

Redmond, Washington, United States -

Full Time

Start Date

Immediate

Expiry Date

05 Jun, 26

Salary

274800.0

Posted On

07 Mar, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Architecture, Access Governance, RBAC, Multi-Tenant Operations, Tenant Isolation, Key Management, CMK, Compliance, Reliability, Scalability, Threat Modeling, Incident Response, C, C++, C#, Java

Industry

Software Development

Description

Overview Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. We are looking for a Principal Software Engineer Manager to join to our team. Our mission on the Sentinel Enterprise Readiness team is to build the foundational access control, tenant isolation, and key management capabilities that make Microsoft Sentinel secure, compliant, and trusted for enterprise and regulated customers worldwide. Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day. Responsibilities Security Architecture & Access Governance Own the end-to-end architecture for Role-Based Access Control (RBAC) and Multi-Tenant Operations (MTO), defining secure authorization models, least-privilege policies, and tenant isolation guarantees across control plane and data plane services. Customer-Managed Key (CMK) Strategy & Compliance Lead the design and execution of Customer-Managed Key (CMK) capabilities, including key lifecycle management, rotation, revocation, and disaster recovery, ensuring compliance with enterprise security, regulatory (SOC, ISO, FedRAMP), and customer data sovereignty requirements. Platform Reliability, Scale, and Risk Management Drive platform-level reliability, scalability, and fault isolation for RBAC, MTO, and CMK systems operating at hyperscale, including threat modeling, blast-radius reduction, secure defaults, and continuous improvement of SLAs and security posture. Operational Excellence & Incident Readiness Establish operational playbooks, telemetry, audits, and incident response workflows for access control and encryption systems, leading post-incident reviews, driving root-cause remediation, and continuously raising the bar on security hygiene and operational maturity. Qualifications Required Qualifications: Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. 2+ years of experience working as team manager with group of 8+ members working on large scale cloud applications and services. Other Requirements: Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter. Preferred Qualifications: Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 12+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. 4+ years people management experience. #MSFT Security #SentinelPlatform Software Engineering M5 - The typical base pay range for this role across the U.S. is USD $139,900 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year. Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Responsibilities

This role involves owning the end-to-end architecture for Role-Based Access Control (RBAC) and Multi-Tenant Operations (MTO), defining secure authorization models and isolation guarantees. Additionally, the manager will lead the design and execution of Customer-Managed Key (CMK) capabilities while driving platform reliability and operational excellence for these critical systems.