OverviewThe Copilot, Agents, and Platform (CAP) organization powers mission-critical Microsoft 365 and Dynamics 365 services, including BizChat, Work IQ, Agent 365, and the agent runtime for the next era of work. Together, we are building the platform that will power Microsoft's AI experiences for decades to come.
Our team builds systems and tools that keep Microsoft's products and services secure, compliant, and auditable at scale. We are looking for a Senior Software Engineer to design and deliver the services, tools and automation that product teams, security assurance and compliance teams depend on every day. In this role you will build production-grade Python and C# services, and you will apply agentic coding practices - AI coding assistants, autonomous and semi-autonomous agents, and LLM-backed workflows - to accelerate how controls are validated, evidence is collected, and risks are surfaced.
This is a hands-on senior engineering role with broad scope. You will own significant components end to end, set technical direction with partner teams across security, compliance, and product engineering, and raise the engineering bar through design reviews, code reviews, and mentorship. Success looks like fewer manual audit hours, toil elimination, faster time to remediation, and durable platforms that other teams depend and build on.
Responsibilities- Design, build, and operate secure, reliable services and internal tooling in Python and C# that automate security assurance, compliance evidence collection, and controls implementation and validation workflows.
- Apply agentic coding techniques - AI coding assistants, tool-calling agents, retrieval-augmented workflows, and prompt and context engineering - to accelerate development and to build automation that reasons over security and compliance data.
- Establish evaluation, measurement, and monitoring for AI-assisted components so that quality, reliability, safety, and cost are understood in production rather than assumed.
- Proficient in Microsoft's Secure Development Lifecycle (SDL) methodologies. Apply Secure by Design and Secure by Default practices: threat modeling, secure coding, secret and credential hygiene, least-privilege access, dependency and supply chain integrity, and responsible AI review.
- Translate regulatory and internal control requirements (for example SOC 2, ISO 27001, FedRAMP, PCI DSS, GDPR) into testable, automated checks with clear pass, fail, and exception semantics.
- Build integrations across Azure, Microsoft Graph, identity and access management systems, CI/CD pipelines, and telemetry platforms to pull authoritative signals into a single, auditable pipeline.
- Operate what you build. Define service level objectives, instrument telemetry, participate in on-call rotation, and drive incident response and repair items to closure.
- Provide technical leadership through design documents, architecture reviews, code reviews, and mentoring of engineers across the team.
- Partner with security engineering, compliance, audit, program management, and product teams to turn ambiguous requirements into shipped, measurable capability.
- Embody Microsoft's Culture and Values.
QualificationsRequired Qualifications:- Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
- OR equivalent experience.
Other Requirements:Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Preferred Qualifications:- Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
- OR Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
- OR equivalent experience.
- 5+ years of experience building cloud services and distributed systems, with depth in Azure, cloud-native architecture, and API and platform engineering.
- Demonstrated working knowledge of security or compliance engineering, such as application security, threat modeling, vulnerability management, identity and access management, software supply chain security, or audit and control automation.
- Hands-on experience building AI-enabled applications using large language models, agent frameworks, tool calling, retrieval-augmented generation, vector search, or evaluation harnesses.
- Experience with AI-native engineering practices, applying AI across the development lifecycle including code generation, refactoring, test automation, and code review.
- Direct experience automating evidence collection or continuous control monitoring against a recognized framework such as SOC 2, ISO 27001, FedRAMP, PCI DSS, NIST 800-53, or HIPAA.
- Experience with infrastructure as code, CI/CD pipeline engineering, containers, and Kubernetes.
- Familiarity with detection engineering, security data pipelines, SIEM tooling, or incident response automation.
- Solid written communication and cross-functional collaboration skills, including the ability to explain security and compliance trade-offs to non-specialist audiences.
#CAP #Agent365
Software Engineering IC4 - The typical base pay range for this role across the U.S. is USD $119,800 - $234,700 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $160,200 - $261,000 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
