This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Consumer Copilot Security is at the core of Microsoft's mission to deliver trusted, human-centered AI experiences. We make security and resilience intrinsic to every Copilot interaction—across devices, platforms, and ecosystems. Our work spans secure identity flows, defenses against emerging threats like prompt injection, and privacy-first systems that scale globally. We are looking for a Senior Software Engineer to join our team. Copilot is becoming an autonomous system that reasons, plans, and acts on behalf of hundreds of millions of users—across consumer and enterprise experiences, surfaces, and modalities. It books meetings, drafts documents, executes multi-step workflows, and orchestrates actions across tools, data, and services. The scope and autonomy are expanding fast. So is the trust surface. Copilot Security & Trust Engineering makes Copilot a trusted companion—safe to use without fear as autonomy becomes the default. The Identity & Isolation team owns the foundational systems that make this possible: authentication and identity experiences that reduce friction and increase trust, workload isolation and adaptive sandboxing that constrain agent authority and blast radius, and agentic access control that governs what Copilot can do, with what data, and on whose behalf—continuously and at runtime.
Job Responsibility:
Identity & authorization systems: Design and implement authentication, session management, token issuance/validation, and authorization flows for consumer Copilot across Windows, Edge, web, iOS, and Android
Isolation & containment: Build and harden execution context isolation, information-flow controls, and boundary enforcement mechanisms that constrain what agents can access and do
Cross-surface consistency: Contribute to common authentication/SSO patterns and SDKs that ensure seamless UX and consistent security controls across consumer surfaces and modalities
Agential identity patterns: Implement authentication and authorization patterns for AI-powered, agential flows—supporting secure delegation, scoped consent, and safe orchestration of actions across devices and services
Platform integration: Partner with Microsoft Account and central identity teams to land platform capabilities in Copilot consumer scenarios at scale
Metrics & observability: Contribute to key authentication and isolation metrics, dashboards, and monitoring
use telemetry to detect anomalous behavior and drive improvements
Hands-on engineering: Ship secure, well-tested, maintainable code and frameworks that other teams can adopt. Participate in code reviews, design discussions, and threat modeling sessions
Product mindset: Balance customer experience with consumer-grade security, privacy, and compliance expectations
Requirements:
Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience
Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience
Experience designing and operating backend services with high availability and reliability requirements
2+ years hands-on experience with authentication/authorization systems, including practical knowledge of OAuth 2.0, OpenID Connect, JWT, session management, or consumer identity flows
Experience with sandboxing, process isolation, container security, or execution context separation
Familiarity with Microsoft Account or similar large-scale consumer identity platforms
Experience shipping identity flows or SDKs across multiple client platforms (Windows, macOS, iOS, Android, web)
Understanding of emerging attack classes against AI systems, including prompt injection, agent misbehavior, or information-flow vulnerabilities
Familiarity with privacy-by-design principles and consumer compliance requirements (e.g., GDPR)
Ability to clearly explain complex identity concepts to technical and non-technical stakeholders