Senior Cloud Security Engineer

Microsoft • Redmond, WA

5d

About The Position

Microsoft’s Cloud Operations & Innovation (CO+I) organization operates the infrastructure and foundational technologies that power Microsoft online services, including Bing, Office 365, Xbox, OneDrive, and Azure. The Senior Cloud Security Engineer helps defend Microsoft datacenter critical infrastructure by implementing and operating modern cloud and on-premises cybersecurity controls. The role works with internal and external partner teams to advance industrial network cybersecurity capabilities and supports a global infrastructure of more than 100 datacenters and 1 million servers. The position offers a flexible work opportunity to work from home partially or fully, along with training, growth opportunities, career rotation programs, diversity and inclusion events, and professional certifications.

The engineer investigates potential security issues and intrusions, develops detections, implements mitigation strategies, and improves security controls through automation. The role also maintains security hardware and software, supports customer and partner experience improvements, responds to escalations, participates in an on-call rotation, and collaborates with partner teams on security standards and incident response. Preferred qualifications include ownership of cloud and identity security direction and roadmaps, Zero Trust adoption, Azure security control engineering, and Infrastructure-as-Code automation.

Requirements

• Doctorate in Statistics, Mathematics, Computer Science, or a related field; OR a master’s degree in one of these fields and at least 3 years of relevant experience; OR a bachelor’s degree in one of these fields and at least 4 years of relevant experience; OR equivalent experience.
• Relevant experience may include software development lifecycle, large-scale computing, threat modeling, cybersecurity, anomaly detection, SOC detection, threat analytics, SIEM, IT, or operations incident response.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

Nice To Haves

• Own technical direction and a multi-quarter roadmap for cloud and identity security, translating organizational objectives into priorities, engineering plans, and measurable outcomes.
• Drive Zero Trust adoption and strong identity governance across IAM, privileged and conditional access, and workload identities.
• Design, deploy, and operate cloud security controls such as WAF, NSG, Azure Firewall, Defender for Cloud, PIM, Key Vault, and network isolation patterns with minimal supervision.
• Drive Infrastructure-as-Code and automation using Bicep, Terraform, PowerShell, and Azure Policy to enforce baselines, reduce manual work, and make cloud-security changes auditable and repeatable at fleet scale.
• Investigate and resolve cloud-security incidents in an area of ownership, participate in on-call rotation, and lead postmortems that turn findings into durable engineering improvements.
• Experience or expertise related to cloud security, Azure, VNET, VWAN, security policy, IAM, identity, PAM, leadership, automation, or efficiency.
• CISSP, CISA, CISM, SANS, GCIA, GCIH, OSCP, PCCSE, PCNSE, PCSAE, CCNP Security, CCIE Security, and/or Security+ certification.
• Experience with industrial control systems.

Responsibilities

• Proactively identify and investigate potential issues and patterns in security controls, drive mitigation strategies, and implement automation to improve network efficiency and effectiveness.
• Install, upgrade, and maintain security hardware, operating systems, and software.
• Identify gaps in security policy and administration, recommend solutions, and implement new or revised security standards in partnership with other teams.
• Maintain standards and improve customer and partner experience by responding to emerging issues and analyzing metrics, performance indicators, and other data sources.
• Respond to escalations and recommend improvements to address gaps.
• Participate in an on-call rotation to support security services.
• Analyze attempted or successful efforts to compromise system security, recommend ways to limit exposure, implement response plans, and take action alongside partner teams.
• Analyze potential or actual intrusions identified through monitoring and create detections using available data, including indicators of compromise and tactics, techniques, and procedures.
• Embody Microsoft’s culture and values.

Benefits

• Training and growth opportunities, including Career Rotation Programs, Diversity & Inclusion trainings and events, and professional certifications.
• Certain roles may be eligible for benefits and other compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior