Microsoft Azure is undergoing explosive growth (100%+ y/y) as customers around the world realize the benefits of moving their services and applications on to the cloud. Security and reliability are the foremost concerns for our customers as they move their services to Azure, outside of their corporate network. The Azure Security team ensures that Azure is the most secure and resilient cloud platform. The team owns the core security services spanning across the Azure stack, providing low level platform services as well as protection for customer applications running in the cloud. We are responsible for identity and access management, secrets/key management, encryption and data protection, Azure security monitoring, anti-malware protection, secure boot and attestation of customer VMs, Linux security, and other security capabilities for the Azure platform.
Access management team is part of Azure Security team acting as the gate keeper for access to Azure platform. The team owns the Just-In-Time Access Service (JIT), Access Monitoring Service (AM) and Breakglass Access Alerting Service. These services collectively enforce the principle of least privilege by ensuring that only authorized users and clients have minimum needed access to core Azure services, when required and for the duration of requirement.
The JIT service is a policy-driven, context-sensitive access management system that provides temporary authorization to users to access Azure platform services. All users of core Azure platform services use JIT to gain access to services and resources for operational needs. Access Monitoring Service is responsible for actively monitoring potential, effective and actual access to Azure production systems and alerting when access anomalies are detected. Our target systems for access management and monitoring include all Azure infrastructure services including compute, networking, storage, monitoring, security and engineering systems. Breakglass alerting service fires near realtime notifications when people use accounts that are meant to only be used for breakglass scenarios. We are looking for very technical and passionate developers to own feature areas in these services and realize our vision of a secure Azure platform.
Responsibilities
In this role, you will own and deliver feature areas in JIT, Access Monitoring Service, breakglass service and auditing services and manage their deployments in Government Cloud. Candidates for this role are expected to be self-driven in owning their feature areas, ensuring high-availability, tracking performance with monitors and alerts and working closely with our partners to deliver features. With security being a top-priority for Azure, this role gives excellent and highly visible opportunities to make a significant impact in securing Microsoft’s vision of the cloud.
The position requires that the candidate is detail and results oriented with a good balance of passion for technology, problem solving skills and eagerness to accept ownership and accountability.
Qualifications
Required Qualifications:
- 3 years + experience in software development
- Bachelor’s degree in Computer Science, or equivalent
Preferred Qualifications:
- Good coding skills in C#/C/C++ and good problem-solving skills Knowledge of Security is a plus
- Knowledge of running and supporting Enterprise Scale Services is a plus
Required Background Checks:
Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
Citizenship Verification: This position requires verification of US Citizenship to meet federal government security requirements.
Candidates must have an active TS and be willing to upgrade to TS/SCI (with polygraph) or have an active TS/SCI and be willing to upgrade to TS/SCI (with polygraph). This role will require candidates to maintain the TS/SCI (with polygraph) clearance.
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
#AzureSecCSS
#AzureSecOpen
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.
Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.
Get email alerts for the latest"Software Engineer II - CTJ jobs in Reston, Virginia, United States"