Overview

Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.

Build and protect the secure foundation of Microsoft's digital ecosystem. Join the Authorization and Root of Trust (ART) team, where you'll help secure the digital platforms, devices, and cloud services that power Microsoft's global infrastructure.

As part of the Identity and Network Access organization, ART delivers foundational security services that establish trust across the entire ecosystem—from PKI and certificate management to secure software distribution and critical network infrastructure. As a *Cloud Network Engineer* on the ART team, you will design, automate, deploy, and operate highly secure network infrastructure supporting mission-critical services and High Security Environments (HSE). You'll work on enterprise-scale systems across global datacenters, collaborating with cross-functional engineering teams to build and maintain the trusted backbone that secures Microsoft's most sensitive operations. This role offers the opportunity to deepen your expertise in secure cloud networking, automation, and zero-trust infrastructure while working alongside industry-leading security and networking experts to solve complex engineering challenges.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

#MSFTSecurity

Responsibilities

• Lead the design, review, and implementation of secure network architectures, infrastructure code, and security controls, identifying risks and preventing issues before production deployment.

• Design and enhance telemetry, monitoring, and analytics solutions to detect service anomalies, identify trends, and accelerate troubleshooting of complex live-site incidents.

• Automate network deployment, validation, and operational processes to reduce human error, improve service availability, and enforce engineering standards across secure environments.

•Define and implement secure connectivity between Azure Secure Datacenters, enabling resilient hybrid services while partnering with service owners to deliver highly available and easy-to-operate solutions.

• Design, deploy, and support enterprise-scale network and storage infrastructure, collaborating with Network, Security, Identity, and Storage engineering teams to deliver secure private cloud solutions.

• Analyze operational data to identify gaps, assess customer impact, develop new validation methodologies, and contribute to technical documentation and knowledge sharing for datacenter operations.

• Partner with internal engineering teams and external vendors to troubleshoot network infrastructure, support hardware lifecycle activities, and deliver secure, scalable networking solutions that support Microsoft's Authorization and Root of Trust (ART) mission.

Qualifications

Required/Minimum Qualifications

• Master's degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or a related field and 1+ year of experience in network design, development, and automation; or Bachelor's degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or a related field and 2+ years of experience in network design, development, and automation; or Equivalent practical experience.

Preferred Qualifications

• Doctoral degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or a related field; or • Master's degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or a related field and 3+ years of experience in network design, development, and automation; or  Bachelor's degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or a related field and 5+ years of experience in network design, development, and automation; or equivalent practical experience.

• Experience designing and implementing enterprise network architectures for hybrid cloud and on-premises environments.

• Proficiency in Infrastructure as Code (IaC) methodologies, with hands-on experience using Ansible and automation frameworks. • Strong understanding of IP networking fundamentals, including routing and network protocols such as BGP, OSPF, MPLS, TCP/IP, UDP, IPsec, MACsec, HTTP, and HTTPS.

• Demonstrated expertise in troubleshooting across the OSI model, including Layer 2/3 switching and routing as well as Layer 7 application firewalls.

• Experience designing, implementing, and supporting application load balancing solutions, including F5 BIG-IP LTM and Azure Load Balancer (HLB) technologies.

• Proficiency in enterprise automation using one or more scripting and programming languages, including PowerShell, Python, Perl, C#, YAML/Ansible, or equivalent technologies.

• Experience deploying and operating large-scale datacenter infrastructure and enterprise networking solutions, including NAS and SAN environments.

• Proven ability to independently lead projects from planning through implementation and operational handoff with minimal supervision.

• Strong collaboration skills, with the ability to mentor teammates, share technical knowledge, and work effectively across engineering, security, storage, and service teams to drive business and technology decisions.

• Excellent analytical, verbal, and written communication skills, with the ability to clearly document designs, operational procedures, and technical recommendations.

Qualifications - Other Requirements:

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings: Microsoft Cloud Background Check: This position will be required to pass the Microsoft background and Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Cloud Network Engineering IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.