Principal Service Engineer - Security Focused

Help secure the cloud Microsoft runs on. Microsoft Digital's Network Defense Engineering (NDE) team in Redmond, Washington is hiring a Principal Security Engineer to lead cloud and hybrid network security. Microsoft Digital (MSD) builds and runs the products and services Microsoft depends on. We pursue big ideas that drive transformational advances for Microsoft and its customers, and our engineers bring deep technical expertise and large-scale, first-hand experience to every problem we solve. As a Principal Service Engineer - Security Focus with a Cloud Security focus on the NDE team, you will set the technical direction for cloud security and extend our security programs - governance, exposure management, protection, detection, and response - from the on-premises network into Azure and our hybrid estate. You will partner closely with Cloud Network Engineering, the team that operates Microsoft's cloud connectivity, secure network zones, and Azure Firewall infrastructure, to harden the boundary between our corporate networks and the cloud, and you will define the security architecture, controls, and telemetry that protect it. Working from industry-standard cybersecurity frameworks, you will lead multi-team programs spanning secure configuration and policy enforcement, identity and privileged access, vulnerability and configuration compliance, threat detection, and automated response. You will influence security policy across organizations, mentor engineers, and serve as a senior technical voice during major-impact incidents. Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

You will lead the design and implementation of cloud and hybrid network security across Microsoft's Azure estate - security architecture, segmentation and zone models, secure connectivity, and control-plane protections - identifying gaps in existing industry standards and setting the technical direction that other teams build on. You will extend NDE's security programs into the cloud space using the industry-standard cybersecurity frameworks- governance and secure configuration standards, exposure and vulnerability management, identity and privileged access, configuration compliance, and threat detection and response - defining the controls, adoption plan, and success measures for each. You will create and monitor action plans for telemetry data and drive analytics that improve the detection and troubleshooting of problems, building large-scale detection and monitoring in Kusto (Azure Data Explorer)/Microsoft Sentinel, Microsoft Defender for Cloud and other Big Data tools such as Spark, SQL, and delivering high-quality automation that removes manual toil. You will lead AI-driven security operations across cloud, network, and infrastructure environments and define security standards for agentic systems that monitor, troubleshoot, configure, and remediate this estate, embedding AI-first security principles into their architecture, engineering, deployment, governance, and incident response, including least-privilege access for agents that operate network and infrastructure. You will respond to incidents and highly complex issues as a senior technical lead in the on-call (DRI) rotation - driving triage, root-cause analysis, containment, and enforcement actions - and then implement the automations and controls that prevent recurrence. You will build coalitions of support across Cloud Network Engineering, security, identity, and application teams to deliver difficult cross-organization projects, resolve team misalignments, and influence security policy, standards, and architectural review. You will ensure