Overview

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day and we need you as a Principal Engineer, Physical Security Innovation.

Microsoft’s Cloud Operations & Innovation (CO+I) is the engine that powers our cloud services. As a Principal Engineer, Physical Security Innovation, you will perform a key role in delivering & sustaining physical security infrastructure and foundational technologies for Microsoft's online services including Bing, Office 365, Xbox, OneDrive, and the Microsoft Azure platform.  Our infrastructure is comprised of a large global portfolio of more than 100 datacenters and 1 million servers. Our foundation is built upon and managed by a team of subject matter experts working to support services for more than 1 billion customers and 20 million businesses in over 90 countries worldwide. This will include the ability to work across our global portfolio of datacenters to identify security technologies and solutions to protect the current and next generations of datacenters. Security innovation and technologies will maintain our datacenter compliance goals while working to improve the datacenter experience with modern solutions. This is a high visibility position in an area of large and expanding investment for Microsoft and offers a terrific opportunity for technical and career growth.

Do you want to empower billions across the world? Come and join us in CO+I and be at the forefront of the action!

In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.

Responsibilities

Physical Security Innovation: Drives the strategy for introducing new security concepts and technologies into an existing, global, and expansive datacenter portfolio. Reviews of large datasets to provide greatest opportunities for improvement. Regularly partners across multiple organizations within Cloud Operations + Innovation (CO+I) to weave security requirements into the fabric of the organization. Maintains backlog of partner asks and routinely delivers monthly and quarterly results, reporting to partners on delivered efforts.
Customer/Partner Results: Helps to make connections and assist in developing agreements among groups to clarify priorities, dependencies, and provide coordination across groups. Solicits input from customers and partners to improve security issues. Analyzes common and uncommon security issues. Uses knowledge of security in developing analytical tools. Develops and promotes effective feedback channels with partners and customers. Addresses complex security issues. Manages escalations as needed.
Planning and Research: Influences product schedules, dependencies and risk assessments as part of security design and analysis. Creates a schedule for analysis of multiple feature areas. Creates schedule for a security analysis that proactively solicits input from multiple stakeholders. Conducts security research of Microsoft and competitor products. Identifies when numerous weaknesses in a feature area make further analysis intractably large. Works with feature team on a security push focused on addressing entire classes of findings. Establishes and delivers on objectives and key results (OKRs) for security initiatives and mentors others to set and deliver on OKRs. Identifies obstacles and adjust strategies to mitigate risks and meet business outcomes. Acts as the representative in leadership forums, communicating progress, advocating for resources, and facilitating the prioritization of work in response to emerging demands. Partners with leaders to secure and align additional resources in sync with project priorities across the organization.
Security Issues Analysis: Defines the strategic vision and leads execution of roadmap for security initiatives, ensuring alignment with overarching company objectives and customer value delivery. Analyzes highly complex issues using multiple data sources to proactively identify security problems and leads the resolution of security problems. Creates and implements new and innovative solutions to mitigate security issues. Identifies and makes tradeoffs to balance security and operational needs. Drives resolution to systemic security issues and proactively addresses potential security challenges. Provides expertise on security designs (e.g., design reviews, threat models). Influences overall feature architecture and aligns security analysis to it. Translates and validates scope of problems and leads the assessment of the impact of security problems on down-level platforms. Identifies and proactively remedies less common types of security issues, defects, or threats, in a product. Partners with multiple feature teams to ensure security issues are understood and addressed. Influences and leads virtual/cross-functional teams and leaders by coordinating and aligning team efforts with strategic goals. Conducts in-depth evaluations of products against security baselines (e.g., gap analysis) and provides recommendations for improvements based on comparisons of product features and baseline standards. Serves as a subject matter expert on security initiatives and objectives and monitors adherence to policies and practices.
Security Reviews and Reporting: Leads large-scale security and architectural design reviews for feature areas. Ensures best practices for security architecture, design and development are in place. Develops best security practices for designing, implementing and validating products, services, or systems. Critically assesses efficiency and effectiveness of reviews. Prioritizes review time appropriately to maximize value. Develops automation and artificial intelligence (AI) tools to analyze review content.
Solution Engineering and Mitigation: Identifies, prioritizes, and targets complex security issues that cause significant negative impact to customers. Creates and drives adoption of relevant mitigations. Drives appropriate response and remediation for categories of issues. Develops and shares best practices for leveraging latest tools and technologies (e.g., artificial intelligence) to identify and mitigate security issues.
Subject Matter Expertise: Helps others by sharing expertise to identify potential security issues, tools, mitigations, and processes (e.g., architecture, failure modes, attack chain, threat modeling, vulnerabilities). Stays current in areas of expertise. Coaches and mentors others in areas of expertise. Participates in conferences and industry events. Models ethical behavior for the team in areas of subject matter expertise.

Qualifications

Required Qualifications:

Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND several years of experience in physical security design, engineering, construction and technical operation, threat modeling
- OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND several years of experience in physical security design, engineering, construction and technical OR equivalent experience.
Several years of experience with physical security systems and programs.

While not required, we also look for the following Preferred Qualifications:

Master's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND several of years experience in physical security design, engineering, construction and technical OR Bachelor's Degree in Statistics, Mathematics, Computer Science, Risk Management, Cyber Security, or related field AND several years of experience in physical security design, engineering, construction and technical OR equivalent experience.

Background Check Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

#COICareers

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.

Principal Engineer - Physical Security Innovation

Job Description