Principal Software Engineer

Principal Software Engineer – Microsoft Entra Identity Security (Conditional Access AI Agent)

Company Overview Microsoft’s Identity Security team builds security solutions that protect billions of users and organizations. The Microsoft Entra Conditional Access team manages the real-time policy engine that determines user access based on identity, risk, and security conditions.

The team is developing an AI-powered Conditional Access Optimization Agent that analyzes security policies, identifies vulnerabilities, recommends improvements, and safely applies changes to strengthen customer security without disrupting users.

Role Summary

The Principal Software Engineer (IC5) will define the technical direction for AI-driven security solutions at Microsoft. The role focuses on:

• Building secure AI agents.
• Using AI to improve cybersecurity operations.
• Designing scalable systems across Microsoft’s identity security ecosystem.
• Driving engineering excellence across teams.

Key Responsibilities

• Design and develop high-quality software systems with AI safety and security in mind.

• Build experiences that help customers improve identity security.

• Develop and maintain systems involving:

• Conditional Access policy engines.

• Identity Protection risk signals.

• AI agent identity platforms.

• Collaborate across Microsoft teams to deliver integrated solutions.

• Use AI tools to accelerate the entire software development lifecycle.

• Participate in on-call support rotations.

Required Qualifications

• Bachelor’s degree in Computer Science or related technical field (or equivalent experience).

• 6+ years of software engineering experience.

• Strong programming experience in one or more:

• C / C++

• C#

• Java

• JavaScript

• Python

• Ability to pass Microsoft security and cloud background checks.

Technical Focus Areas

• Artificial Intelligence (AI) & Generative AI.
• Cloud infrastructure.
• Identity and access management.
• Zero Trust security.
• Distributed systems.
• Secure software engineering.

Role Details

• Company: Microsoft
• Team: Microsoft Entra Identity Security – Conditional Access
• Location: Hybrid (3 days/week in office)
• Travel: Less than 25%
• Employment: Full-time
• Level: Principal Software Engineer (IC5)

Compensation (U.S.)

• Base salary range: $142,800 – $274,800/year
• San Francisco Bay Area & New York City: $188,000 – $304,200/year
• Additional benefits and compensation may apply.

Ideal Candidate Profile

A senior software engineer with deep experience in cloud systems, security, and AI, capable of leading architecture decisions and building next-generation identity protection technologies used by billions of people worldwide.