Principal Security Engineer
Summary
Design and implement cryptographically secure boot, attestation, and runtime services for Microsoft's Data Processing Unit (DPU) ASIC, collaborating with hardware and firmware engineers to integrate the solution into Azure. Core work involves low-level programming in C/C++/Rust, cryptography including post-quantum, secure enclaves, and embedded systems.
Microsoft Silicon, Cloud Hardware, and Infrastructure Engineering (SCHIE) is the team behind Microsoft’s expanding Cloud Infrastructure and responsible for powering Microsoft’s “Intelligent Cloud” mission. SCHIE delivers the core infrastructure and foundational technologies for Microsoft's over 200 online businesses including Bing, MSN, Office 365, Xbox Live, Teams, OneDrive, and the Microsoft Azure platform globally with our server and data center infrastructure, security and compliance, operations, globalization, and manageability solutions. Our focus is on smart growth, high efficiency, and delivering a trusted experience to customers and partners worldwide and we are looking for passionate, high-energy engineers to help achieve that mission.
The Data Processing Unit (DPU) team brings together state-of-the-art software and hardware expertise to create a highly programmable and high-performance ASIC with the capability to efficiently handle large data streams. Thanks to its integrated design, this solution empowers teams to operate with increased agility and deliver significantly superior performance compared to CPU-based alternatives.
We are looking for a Principal Security Engineer to join our team and help develop and enhance the DPU’s security features. In this role, you will be responsible for designing and implementing key software that securely boots and attests the DPU, as well as providing high performance runtime services. You will work closely with hardware engineers, firmware engineers, and system architects to ensure the DPU software stack meets the requirements of security, performance, and scalability. You will also collaborate with other teams across Microsoft to integrate the DPU solution into various cloud scenarios and applications. You will apply your expertise in low-level programming, cryptography, security, and distributed systems to deliver cutting-edge solutions that enable new possibilities for cloud computing.
Responsibilities
Design and Implement cryptographically secure flows for boot, certification, attestation and manufacturing.
Participate in the transition from classical cryptography to emerging Post-Quantum Cryptography algorithms.
Drive evolution of the design and architecture of the DPU’s Secure Enclave, for both boot and runtime services
Collaborate with other engineers ensure the successful execution of projects, to seamlessly integrate the DPU in the Azure ecosystem
Identify and promote opportunities for design and/or improvements to enhance technical designs, efficiency and productivity within the team
Qualifications
Required Qualifications
- Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
- OR equivalent experience.
Other Requirements
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.
Preferred Qualifications
- Bachelor’s degree in Computer Science or related technical field and 6+ years technical experience coding in languages including, but not limited to, C, C++, Python, Rust and JavaScript
- 4+ years’ experience in embedded software development and system design
- 3+ years developing crypto libraries: Symmetric, asymmetric, hashing, Public-key Cryptography Standards
- 4+ years working with cryptographic tools such as openssl, Mbed TLS, or SymCrypt.
- Recent knowledge of post-quantum cryptography techniques
- Experience developing Boot ROM code
- 3+ years of experience developing secure enclave software
- 3+ years of experience in SW / HW interfaces, simulations, and systems bring-up
Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.