OverviewMicrosoft Entra secures identities for billions of users - and, increasingly, for the AI agents acting on their behalf. Within Identity Security, the Conditional Access team owns the policy engine that decides, in real time on every sign-in, who gets access to what and under which conditions. It is the most consequential enforcement point in the Microsoft identity stack. We are now building the agentic layer on top of it: the Conditional Access Optimization Agent, an AI system that reasons over an organization's policies, surfaces gaps and risky configurations, and recommends and safely applies the changes that harden posture without breaking users.
We are hiring a
Principal Software Engineer to set the technical direction for securing AI at Microsoft - both securing the agents we ship and using agents to secure our customers. It is a problem space that spans the Conditional Access policy engine, Identity Protection risk signals, and the emerging agent-identity platform, and the person in this role defines how those pieces fit together.
#MSFTSecurity #AI #ConditionalAccess #GenAI #ZeroTrust
Responsibilities- Writing high quality code, designing systems with AI and safety in mind, delivering high quality experiences to customers, willing to perform on call duties on a rotation basis to support the problem, able to work across teams and products to delivery One Microsoft experiences.
- Accelerating all parts of software lifecycle using AI.
QualificationsRequired Qualifications:- Do you have a Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience?
Other Requirements: Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
