Principal Software Engineer

About this role

What You'll Do Define the architecture for Conditional Access at identity-platform scale Own the technical strategy for the CA evaluation engine — today processing millions of policy evaluations per second inside ESTS with sub-millisecond latency budgets Design the next-generation policy model: portable, data-driven policies that evaluate at token-time and at the data plane (GSA, MISE, resource providers) Drive convergence of token-time CA and Continuous Access Evaluation into a unified enforcement architecture Lead the CA-for-Agents technical vision Architect how CA evaluates agent identities as first-class actors — spanning OBO, S2S, CUA, and agentic chaining scenarios Drive cross-org technical alignment Partner with Identity Protection, Defender, Intune, Graph, GSA, and Azure networking to integrate risk signals, device posture, and network context into CA evaluation Represent CA engineering in cross-IDNA architecture reviews, security design reviews, and partner alignment forums Influence the ESTS roadmap for protocol-level changes required for agent governance (FIC, token exchange, CAE for OBO) Raise the engineering bar Set standards for safe rollout of policy evaluation changes in a Tier 0 service — feature flags, canary-first deployment, blast-radius analysis Drive testability and validation strategy: policy correctness proofs, synthetic tenant replay, and agent-driven test automation Mentor senior engineers across the CA and ESTS stack; build the technical bench for the team's next chapter Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. These requirements include, but are not limited to the following specialized security screenings: Deep expertise in distributed systems, high-performance runtime engines, or policy/rules engines operating at extreme scale Strong background in i

Apply for this role on Microsoft’s official careers site.