Principal Software Engineer

Microsoft • Redmond, WA

6d

About The Position

Microsoft 365 Copilot is a foundational productivity experience powered by large language models, Microsoft Graph, user context, and the web. At the core of Copilot sits the Copilot Agent/BizChat Platform, which designs and operates the core agent runtime and shared platform that powers Copilot experiences consistently across Outlook, Teams, Word, Excel, PowerPoint, and more—safely, reliably, and at M365 scale.
Our team builds a modular, event‑driven platform focused on runtime and orchestration, durable long‑running tasks, real‑time and multimodal coordination, platform APIs, and developer experience—designed with reliability, observability, and safe deployment as first‑class principles. Operating at the heart of M365, BizChat Platform sets engineering standards for how Copilot agents are built, deployed, evaluated, and scaled, with robust guardrails that protect customer trust and M365’s high availability bar.
We are seeking a Principal Software Engineer to drive security governance, architecture, risk management, and compliance execution for BizChat Platform across MSAI. This role partners deeply with engineering and security leadership to ensure high‑visibility security initiatives and audit-driven requirements are translated into crisp plans, unblocked quickly, and delivered with measurable outcomes.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees, we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Requirements

• Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Nice To Haves

• Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• 6+ years hands-on experience designing and operating security-critical or AI-powered systems at scale, including agentic AI, secure orchestration, or advanced threat defenses.
• Ability to clearly explain complex systems and security concepts to technical and non-technical stakeholders and influence cross-org roadmaps.
• Track record of mentoring experienced engineers, driving adoption of secure agentic AI standards across product teams, and influencing technical roadmaps while balancing innovation velocity with fundamentals.

Responsibilities

• Own security execution for the BizChat Platform as a Principal Software Engineer, driving platform‑level security architecture, governance, and delivery across MSAI.
• Run the security champion operating cadence (weekly/biweekly/monthly/quarterly) to intake requirements, track commitments (e.g., SFI/QEI), surface blockers, and report clear status to leadership.
• Translate security, compliance, and audit requirements into engineering plans, milestones, and measurable outcomes; ensure workstreams are execution‑ready and unblock teams as needed.
• Coordinate cross‑team security workstreams across MSAI to align scope, ownership, dependencies, and timelines; escalate risks, exceptions, and dependency issues through appropriate leadership channels.
• Own and maintain the MSAI risk registry, ensuring risks are current, well‑scoped, mitigations are tracked, and leadership reviews are decision-ready.
• Drive compliance and audit readiness for high‑visibility initiatives (e.g., regulatory, cloud compliance, certificate and identity changes), providing centralized tracking, evidence readiness, and progress reporting.
• Act as the platform security architect, reviewing and influencing designs to ensure secure‑by‑default patterns, threat model coverage, and consistent security “definition of done.”
• Lead critical security response and remediation efforts when required, coordinating analysis, follow‑ups, and closure across engineering and leadership stakeholders.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level