Senior Software Engineer

Microsoft • Redmond, WA

3d • $119,800 - $261,000

About The Position

The Agent 365 Foundation team builds and operates the platform layer that keeps agent workloads reliable, secure, and fast at Microsoft scale. The team owns traffic ingress: gateway and edge systems through which requests reach its clusters. Current work focuses substantially on ingress for Dynamics 365 and Power Platform, including routing and gateway policy, connection and protocol handling, tenant isolation, throttling and abuse mitigation, regional failover, and observability.

This is a hands-on engineering role designing, building, and operating the gateway and ingress path end to end. The engineer writes services in C# and Go, tunes TLS and HTTP/2 behavior, shapes gRPC traffic, works with Azure Front Door and first-party edge components, and hardens systems against volumetric and application-layer attacks. The role owns outcomes, including decisions about resiliency and safe failure modes, and participates in the on-call rotation. It requires close involvement with the system, evidence-based engineering judgment, and collaboration across teams. Ingress work directly affects the reliability and security of Microsoft's business platforms and their customers.

Requirements

• Bachelor's degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
• Ability to meet Microsoft, customer, and/or government security screening requirements, including passing the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.
• Proven knowledge of L4 and L7 networking, including TCP connection behavior, load balancing, proxying, routing, DNS, and transport-level versus application-level tradeoffs.
• Practical depth in TLS, HTTP/2, and gRPC, including certificate management, handshake and connection tuning, multiplexing behavior, and diagnosing protocol failures from packet captures and traces.
• Production experience with C# or Go, and willingness to work fluently in both.
• Demonstrated experience making services resilient under stress, including designing graceful degradation and validating it.
• Experience operating systems you build, including on-call ownership, live-site debugging, and post-incident improvement.
• Background in performance analysis and capacity planning for high-throughput, low-latency systems.

Nice To Haves

• Master's degree in Computer Science or a related technical field and 6+ years of technical engineering experience coding in languages including C, C++, C#, Java, JavaScript, or Python; or bachelor's degree in a related field and 8+ years of such experience; or equivalent experience.
• Hands-on experience with Azure Front Door, Azure networking, or comparable CDN and global edge platforms.
• Direct experience with DDoS protection, including volumetric and application-layer attack detection, mitigation policy, rate limiting, and bot management.
• Experience running ingress in Kubernetes environments, including service mesh and Envoy-based data planes.
• Familiarity with multi-tenant SaaS traffic patterns, such as Dynamics 365 or Power Platform, and the isolation and fairness problems they create.

Responsibilities

• Design, implement, and operate L4 and L7 ingress components, including gateways, proxies, load balancing, and routing policy for Dynamics 365 and Power Platform traffic.
• Own protocol-layer behavior, including TLS termination and certificate lifecycle, HTTP/2 connection management, gRPC routing and streaming, and performance characteristics.
• Build request-path resiliency through health-based routing, retries and hedging, circuit breaking, load shedding, rate limiting, and regional failover; validate behavior through fault injection and load testing.
• Strengthen edge security through DDoS detection and mitigation, WAF and abuse-mitigation policy, tenant isolation, and defense against application-layer attack patterns.
• Integrate and tune Azure Front Door and related edge services alongside first-party gateway components, and determine which layer should address each problem.
• Instrument ingress so latency, error, and saturation questions can be answered quickly; drive incident response, root-cause analysis, and follow-up improvements.
• Partner with Dynamics 365, Power Platform, and Agent 365 service teams on onboarding, capacity, and traffic-shaping decisions.
• Raise the engineering bar through design and code reviews.
• Participate in the on-call rotation and operate the systems built.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior