Principal Security Engineer

Job Description

Job Title: Principal Security Engineer. Location: Santa Clara, California, USA
Job Type: Full-Time
Work Arrangement: Hybrid, 3 days per week in-office

Responsibilities:

• Design and implement cryptographically secure flows for boot, certification, attestation, and manufacturing.
• Participate in the transition from classical cryptography to emerging post-quantum cryptography algorithms.
• Drive the evolution of the DPU Secure Enclave architecture and design for both boot and runtime services.
• Collaborate with engineers to successfully execute projects and seamlessly integrate the DPU into the Azure ecosystem.
• Identify and promote opportunities to improve technical designs, efficiency, and team productivity;
• Work closely with hardware engineers, firmware engineers, and system architects on security, performance, and scalability requirements.
• Apply expertise in low-level programming, cryptography, security, and distributed systems to develop advanced cloud computing solutions.

Qualifications:

• Bachelor's degree in Computer Science or a related technical field and 6+ years of technical engineering experience with coding in languages including C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
• Experience developing software using one or more relevant programming languages.
• Ability to meet Microsoft, customer, and/or government security screening requirements;
• Ability to pass the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Preferred:

• Bachelor's degree in Computer Science or a related technical field and 6+ years of technical experience with languages including C, C++, Python, Rust, and JavaScript.
• 4+ years of experience in embedded software development and system design.
• 3+ years of experience developing cryptographic libraries, including symmetric cryptography, asymmetric cryptography, hashing, and public-key cryptography standards.
• 4+ years of experience working with cryptographic tools such as OpenSSL, Mbed TLS, or SymCrypt.
• Recent knowledge of post-quantum cryptography techniques;
• Experience developing Boot ROM code.
• 3+ years of experience developing Secure Enclave software.
• 3+ years of experience with software/hardware interfaces, simulations, and systems bring-up.

Benefits and Compensation:

• Typical U.S. base pay range for this Software Engineering IC5 position: $142,800 to $274,800 per year.
• Base pay range for specific locations within the San Francisco Bay Area and New York City metropolitan area: $188,000 to $304,200 per year.
• Certain roles may be eligible for additional benefits and compensation.
• Microsoft provides additional information about benefits and pay as part of its employment compensation program.

Other Information:

• The position will remain open for a minimum of 5 days and applications will be accepted on an ongoing basis until the role is filled.
• Travel is expected to be less than 25%.
• Microsoft is an equal opportunity employer and considers qualified applicants without regard to characteristics protected by applicable laws.
• Reasonable accommodations are available during the application process for eligible candidates;
• Microsoft uses AI technology provided by Eightfold in parts of its recruiting process. Microsoft applies human oversight and judgment to the process.
• Candidates must satisfy applicable Microsoft, customer, and/or government security screening requirements.
• The position requires successful completion of the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.