Software Engineer II

A Software Engineer II at Microsoft joins the Cloud & AI organization to help secure digital technology platforms, devices, and clouds across diverse environments while advancing internal security. The IAM AIOps team handles all Tier 2 operations for EIAM services, including Entra ID, Core ID, Identity Pass, Dir Sync, ID Web, and AVD Offerings for Corp Vendors & CE&S, and focuses on improving these services and increasing customer productivity. This role centers on designing and building secure, scalable solutions that address recurring identity and security challenges through automation and platform capabilities, rather than reactive operations. You will partner with IAM Protect Engineering teams to design, implement, and evolve security-compliant systems using Azure services, modern software engineering practices, and AI-assisted tooling to improve reliability, security, efficiency, and customer experience. Microsoft’s mission is to empower every person and every organization to achieve more, foster a growth mindset, innovate to empower others, and collaborate to realize shared goals, built on values of respect, integrity, and accountability to create an inclusive culture. We are committed to cultivating an inclusive work environment for all employees.

• Work on Identity and Access Management (IAM) platforms and internal identity systems to design and implement features that improve security posture, operational reliability, and customer experience.

• Develop internal platforms and services that proactively address recurring customer issues and enable customer self-resolution through intelligent, guided experiences.

• Apply an AI-first approach to problem solving—leveraging intent detection, knowledge grounding, orchestration, and policy-driven workflows before introducing traditional code-heavy automation.

• Contribute to Security Operations Engineering efforts as needed, learning from incidents and strengthening preventive and detective controls.

• Continuously improve engineering quality, operational readiness, and documentation through design reviews, post-incident analysis, and best practices.

• Build internal tools or platform components that make it easier for engineers and operators to interact with identity systems safely. Contribute to improving team processes, documentation, and engineering quality.

• Participate in on-call rotations and incident reviews to learn how identity systems behave under real-world conditions.

• A bachelor’s degree in computer science or a related technical field.

• 6+ years of software development experience using Microsoft technologies, with strong proficiency in C#, .NET 8/.NET Core, and ASP.NET Core.

• Experience designing and building scalable Web APIs and backend services using ASP.NET Core, with event-driven architecture patterns for reliable, loosely coupled distributed systems.

• Strong understanding of OAuth 2.0, OpenID Connect, token-based authentication, and authorization models.

• Experience applying Secure-by-Design principles when designing and implementing production services.

• Strong fundamentals in software engineering, including data structures, algorithms, and object-oriented or modular design.

• Experience building production services or distributed systems, not just scripts or prototypes.

• Familiarity with API-based system integration and secure service-to-service communication.

• Experience building services on a cloud platform (Azure preferred).

• Ability to work effectively as a team player in a collaborative engineering environment.

• Experience developing and supporting internal developer platforms or shared services.

• Experience working on identity platforms, access management systems, or security-critical services.

• Familiarity with Azure Entra ID / Azure AD, Microsoft Graph-style APIs, or similar identity ecosystems.

• Experience building and integrating AI-assisted experiences (e.g., intelligent workflows, copilots/agents, or chat-based tooling) and applying that mindset when designing system features end-to-end.

• Working knowledge of OAuth 2.0, OpenID Connect, tokens, and claims and identity system fundamentals.

• Some exposure to incident response or SRE practices in identity or security domains.

• Experience/familiarity with application and system monitoring systems.