This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are looking for a Prinicpal Software Engineer for the Policy & Configuration team owns the deployment control plane for Microsoft Threat Protection. It controls how every security service deploys across regions and sovereign clouds. The team is replacing a legacy configuration system with .NET Aspire and encoding deployment rules, data-residency constraints, and compliance policies into the toolchain as Roslyn analyzers, CI gates, and typed annotations. The compiler catches what used to break at deploy time. Half the work is architecture. half is cross-org advocacy with partner platform teams. Everything the tool does gets pushed upstream into Azure and .NET. Small team. High leverage.
Job Responsibility:
Design the migration path from a legacy deployment SDK to .NET Aspire
Define the publishing hooks, plan the incremental cutover, and solve the coexistence problems that come from running old and new systems side by side in production
Drive adoption across organizational boundaries
Work directly with Azure platform and .NET partner teams to push deployment capabilities upstream
Encode compliance and deployment standards into the toolchain
Own architecture decisions for the deployment configuration domain
Shape the developer experience so service teams deploy through standard .NET code
Build machine-readable interfaces - MCP servers, structured APIs - so AI agents and human engineers work against the same deployment control plane
Requirements:
Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience