Microsoft Silicon, Cloud Hardware, and Infrastructure Engineering (SCHIE) is the team behind Microsoft’s expanding Cloud Infrastructure and responsible for powering Microsoft’s “Intelligent Cloud” mission. SCHIE delivers the core infrastructure and foundational technologies for Microsoft's over 200 online businesses including Bing, MSN, Office 365, Xbox Live, Teams, OneDrive, and the Microsoft Azure platform globally with our server and data center infrastructure, security and compliance, operations, globalization, and manageability solutions. Our focus is on smart growth, high efficiency, and delivering a trusted experience to customers and partners worldwide and we are looking for passionate, high-energy engineers to help achieve that mission.
The Data Processing Unit (DPU) team brings together state-of-the-art software and hardware expertise to create a highly programmable and high-performance ASIC with the capability to efficiently handle large data streams. Thanks to its integrated design, this solution empowers teams to operate with increased agility and deliver significantly superior performance compared to CPU-based alternatives.
We are looking for a Principal Security Engineer to join our team and help develop and enhance the DPU’s security features. In this role, you will be responsible for designing and implementing key software that securely boots and attests the DPU, as well as providing high performance runtime services. You will work closely with hardware engineers, firmware engineers, and system architects to ensure the DPU software stack meets the requirements of security, performance, and scalability. You will also collaborate with other teams across Microsoft to integrate the DPU solution into various cloud scenarios and applications. You will apply your expertise in low-level programming, cryptography, security, and distributed systems to deliver cutting-edge solutions that enable new possibilities for cloud computing.
Responsibilities
Design and Implement cryptographically secure flows for boot, certification, attestation and manufacturing.
Participate in the transition from classical cryptography to emerging Post-Quantum Cryptography algorithms.
Drive evolution of the design and architecture of the DPU’s Secure Enclave, for both boot and runtime services
Collaborate with other engineers ensure the successful execution of projects, to seamlessly integrate the DPU in the Azure ecosystem
Identify and promote opportunities for design and/or improvements to enhance technical designs, efficiency and productivity within the team
Qualifications
Required Qualifications
- Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python
- OR equivalent experience.
Other Requirements
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire/transfer and every two years thereafter.
Preferred Qualifications
- Bachelor’s degree in Computer Science or related technical field and 6+ years technical experience coding in languages including, but not limited to, C, C++, Python, Rust and JavaScript
- 4+ years’ experience in embedded software development and system design
- 3+ years developing crypto libraries: Symmetric, asymmetric, hashing, Public-key Cryptography Standards
- 4+ years working with cryptographic tools such as openssl, Mbed TLS, or SymCrypt.
- Recent knowledge of post-quantum cryptography techniques
- Experience developing Boot ROM code
- 3+ years of experience developing secure enclave software
- 3+ years of experience in SW / HW interfaces, simulations, and systems bring-up
Software Engineering IC5 - The typical base pay range for this role across the U.S. is USD $142,800 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
Skills Required
- Bachelor's degree in Computer Science or a related technical field, or equivalent experience
- 6+ years of technical engineering experience with coding in languages including C, C++, C#, Java, JavaScript, or Python
- Ability to meet Microsoft Cloud Background Check and applicable customer or government security screening requirements
- Bachelor's degree in Computer Science or a related technical field and 6+ years of technical coding experience, including C, C++, Python, Rust, or JavaScript
- 4+ years of embedded software development and system design experience
- 3+ years of experience developing cryptographic libraries, including symmetric, asymmetric, hashing, and public-key cryptography standards
- 4+ years of experience with cryptographic tools such as OpenSSL, Mbed TLS, or SymCrypt
- Recent knowledge of post-quantum cryptography techniques
- Experience developing Boot ROM code
- 3+ years of experience developing secure enclave software
- 3+ years of experience with software and hardware interfaces, simulations, and systems bring-up
Microsoft Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Microsoft and has not been reviewed or approved by Microsoft.
-
Fair & Transparent Compensation — Pay is presented as broadly competitive overall, with clear role/level/location variation and an emphasis on using posted ranges and band information for apples-to-apples comparisons.
-
Retirement Support — Retirement benefits are described as a standout, highlighted by a strong 401(k) match structure and immediate vesting, plus additional plan features for tax-advantaged saving.
-
Parental & Family Support — Family-oriented benefits are portrayed as a meaningful strength, with substantial paid parental leave and added supports like back-up care and adoption/surrogacy assistance.
Microsoft Insights
What We Do
At Microsoft, our mission is to empower every person and every organization on the planet to achieve more. Our mission is grounded in both the world in which we live and the future we strive to create. Today, we live in a mobile-first, cloud-first world, and the transformation we are driving across our businesses is designed to enable Microsoft and our customers to thrive in this world.
