Principal Security Engineer

Microsoft • Redmond, WA

18h • $142,800 - $304,200

About The Position

Do you want to be at the forefront of innovating the latest hardware designs to propel Microsoft’s cloud growth? Are you seeking a unique career opportunity that combines technical capabilities, cross-team collaboration, with business insight and strategy?
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees, we come together with a growth mindset, innovate to empower others, and collaborate to achieve our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond. In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Join the Systems Planning and Architecture (SPARC) team within Microsoft’s Azure Hardware Systems and Infrastructure (AHSI) organization, the team behind Microsoft’s expanding Cloud Infrastructure and for powering Microsoft’s “Intelligent Cloud” mission. Microsoft delivers more than 200 online services to more than one billion individuals worldwide, and AHSI is the team behind our expanding cloud infrastructure. We deliver the core infrastructure and foundational technologies for Microsoft's cloud businesses including Microsoft Azure, Bing, MSN, Office 365, OneDrive, Skype, Teams and Xbox Live.
The SPARC organization manages Azure’s hardware roadmap from architecture concept through production for all of Microsoft’s current and future on-line services. This role is for a Principal Security Engineer with a background in security protocols and secure hardware design. You will be involved with all phases of product development, from secure silicon design through manufacturing and supply chain, and into high scale deployment. At the design phase, you will work with security threat model team and be responsible for the silicon security architecture and design of low-level hardware accelerators.

Requirements

• Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.

Nice To Haves

• 10+ years of professional experience designing, developing security critical code.
• Familiarity with standard Cryptography algorithms
• Familiarity with secure boots, attestation, recovery
• Problem solving, debugging, and troubleshooting skills, advanced design and development skills.
• Experienced with ROM, Bootloader, and embedded runtime development.
• Ability to debug and resolve issues spanning multiple subsystems.
• Proven and demonstrable skill in Rust, C, C++.
• Experience in working in pre silicon environments.
• Familiar with PCIe, NVME, I3C, I2C, SPI, SPI-FLAS

Responsibilities

• Designed and developed firmware for Hardware Security Modules (HSMs), security accelerators, and Root of Trust (RoT) solutions.
• Contributed to all phases of product development, including architecture, design, implementation, integration, and validation for security-focused SoCs.
• Defined and implemented bootloader and embedded kernel architectures to support secure and reliable system initialization.
• Developed secure firmware supporting security protocols, key management, attestation, and cryptographic services.
• Implemented and optimized secure boot flows to ensure trusted device startup and firmware integrity.
• Wrote, debugged, and optimized embedded firmware with a focus on performance, reliability, and security.
• Diagnosed and resolved complex firmware issues through root cause analysis, debugging, and troubleshooting.
• Applied cryptographic principles and security protocols to protect embedded systems and hardware assets.
• Developed firmware for embedded devices running Real-Time Operating Systems (RTOS), utilizing OS primitives such as task scheduling, interrupts, threading, synchronization, and memory management.
• Collaborated with cross-functional hardware, software, and security engineering teams to deliver secure embedded solutions.
• Ensured firmware compliance with security requirements and industry best practices for trusted computing environments.

Benefits

• Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

What This Job Offers

• Job Type: Full-time
• Career Level: Principal