Security is one of the most critical priorities for our customers in a world increasingly shaped by digital threats, regulatory demands, and complex IT environments. Microsoft’s mission is to make the digital world safer for everyone – by reshaping how security is delivered and empowering every user, customer, and developer with simplified, end-to-end protection across the cloud. We are committed to securing technology platforms, devices, and diverse customer environments, while also protecting our internal estate. Our culture embraces a growth mindset, inspires excellence, and encourages individuals and teams to bring their best every day. Through this approach, we drive innovations that transform lives and create meaningful global impact.

The Identity & Access Management (IAM) Protect team within the CISO organization plays a central role in this vision by managing Entra tenants across the Microsoft Cloud. We design, build, and operate robust security frameworks that enforce policies across thousands of services – safeguarding both Microsoft’s infrastructure and customer environments.

We’re looking for a Principal Software Engineering Manager with deep technical expertise and a strong security mindset to lead our Tenant Security team. This leader will drive the architecture, development, and evolution of systems that enforce policy, protect tenant boundaries, and detect and respond to adversaries. If you are passionate about distributed systems, identity and access management, and building security at scale, we want to hear from you.

Responsibilities

Lead a team of engineers to design, build, and operate scalable security solutions that protect Microsoft cloud tenants from adversarial threats.
Drive the development of distributed frameworks and platforms that enforce authentication, authorization, and governance policies at scale.
Collaborate closely with cross-functional teams – product managers, security researchers, and engineering peers – to define requirements and prioritize initiatives.
Foster a data-driven culture by instrumenting telemetry and using metrics to inform decisions, measure effectiveness, and improve customer outcomes.
Guide architecture reviews, lead technical discussions, and ensure operational excellence through strong engineering practices and documentation (e.g., design docs, troubleshooting guides).
Troubleshoot and resolve complex issues across networking, compute, storage, and identity stacks, including live site incidents.
Coach and develop engineers on the team, fostering a culture of growth, inclusion, and high performance.

Qualifications

Bachelor’s degree in computer science or a related technical discipline AND 10+ years of hands-on software engineering experience in languages such as C, C++, C#, Java, JavaScript, or Pyth OR equivalent practical experience
Proven people management experience, including leading, coaching, and developing high-performing engineering teams
Strong understanding of cybersecurity principles and practices
Experience building and operating distributed systems or platforms at scale in a cloud environment

Preferred Qualifications

Bachelor’s degree AND 8+ years of engineering experience . Master’s degree with 6+ years of engineering experience
5 + years of experience in the cybersecurity domain
Demonstrated experience in Identity & Access Management (IAM) systems, including authentication, authorization, and policy enforcement
Strong leadership skills with a track record of delivering complex technical projects, setting direction, and aligning teams across multiple stakeholders
Experience working with or around Microsoft Entra or similar identity platforms

Other Requirements

The role is subject to Microsoft’s background check process, including the Microsoft Cloud Background Check, which must be passed upon hire/transfer and every two years thereafter.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.