Principal Security Operations Engineer - Systems Architect

The Cloud & AI organization accelerates Microsoft’s mission and ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. IAM Protect safeguards Microsoft’s most critical cloud workloads by reducing risk in the Trusted Computing Base (TCB). We identify adversary paths, shrink the TCB’s attack surface, improve tenant/service isolation, and ensure high-fidelity telemetry exists to detect and respond at speed. We’re hiring a Principal Security Operations Engineer - Systems Architect to lead the technical architecture for TCB risk reduction. You will design and drive end-to-end solutions that (1) identify and quantify risk, (2) shrink TCB footprint and collapse unneeded trust edges, (3) raise isolation guarantees across identity, networking, compute, storage, and supply chain, and (4) expand/validate telemetry coverage required for prevention, detection, and response. This role is deeply technical and hands-on: you’ll author reference architectures, hardening patterns, and guardrails; host design reviews with partner teams; and lead cross-company risk burndown campaigns that land durable controls - not just playbooks.