Software Engineer - Azure Managed Environment

Overview

Do you want to build secure, scalable cloud controls that protect a large Azure-managed environment while enabling customer-facing teams to move quickly?

The Azure Managed Environment team provides governed Azure tenants and subscriptions for customer demonstrations, proofs of concept, support engineering, and other non-production scenarios. The service applies centralized policy, monitoring, automated remediation, lifecycle governance, and cost controls to reduce production-tenant exposure, limit shadow IT, and preserve delivery agility.

We are seeking a Software Engineer to design, build, and operate automated control solutions that enforce security and governance requirements across this environment. You will translate SFI, Azure Tenant Baseline, Entra, privacy, and business requirements into scalable policies, automations, telemetry, and remediation workflows.

This is a hands-on individual contributor role that combines software engineering, cloud security, operational judgment, and cross-functional leadership. You will partner with security architects, service owners, support teams, and business stakeholders to improve control effectiveness, reduce manual effort, and strengthen the resilience of the managed environment.

Responsibilities

• Engineer cloud controls: Design and develop reusable Azure Policy definitions, policy initiatives, automation, and remediation workflows that enforce security and governance requirements across managed tenants and subscriptions.
• Lead control implementation: Assess new SFI, Azure Tenant Baseline, Entra, privacy, and internal control requirements; determine affected resources and control gaps; and lead architecture, implementation, validation, and rollout.
• Build compliance by design: Embed secure defaults, configuration standards, monitoring, and automated remediation into provisioning and lifecycle processes so compliance is consistent and scalable.
• Own engineering quality: Establish design standards, code-review practices, testing, release controls, documentation, and operational readiness for cloud-control solutions.
• Improve detection and remediation: Use telemetry, execution logs, and control-effectiveness measures to identify failures, tune enforcement, reduce false positives, and accelerate risk reduction.
• Advance lifecycle and cost governance: Engineer solutions for tenant and subscription provisioning, renewal, decommissioning, ownership hygiene, resource governance, allowance management, and cost optimization.
• Automate repeatable operations: Replace manual processes and one-off scripts with durable services, APIs, pipelines, and AI-enabled engineering approaches where appropriate.
• Support operational resilience: Provide engineering leadership during complex incidents and escalations, perform root-cause analysis, and drive corrective and preventive actions.
• Partner across functions: Work with service owners, security and privacy teams, platform engineering, finance, support, and business stakeholders to align requirements, priorities, and delivery plans.
• Provide technical leadership: Mentor engineers, communicate design and risk tradeoffs clearly, and influence decisions without relying on direct authority.

Qualifications

Required Qualifications

• 3+ years of professional software engineering experience using one or more general-purpose languages, scripting languages, or infrastructure-as-code technologies; OR a bachelor’s degree in Computer Science, Engineering, or a related field and 1+ years of relevant experience; OR equivalent experience.
• Experience leading AI-powered transformation initiatives, including the implementation of agentic workflows, automation, and data-driven solutions at enterprise scale.
• Familiarity with AI governance, risk management, and responsible AI practices, with the ability to translate emerging AI capabilities into measurable business value.
• Experience designing, developing, testing, deploying, and supporting production-quality cloud services, automation, or platform engineering solutions.
• Hands-on experience with Microsoft Azure, including Azure Policy, Azure Resource Manager, identity and access management, monitoring, or subscription and tenant governance.
• Understanding of secure software development, cloud security controls, least privilege, configuration management, and automated compliance.
• Ability to diagnose complex technical issues, use telemetry to drive decisions, and lead remediation across multiple teams.
• Strong written and verbal communication skills with the ability to explain technical and risk tradeoffs to engineering and business audiences.

Preferred Qualifications

• Experience with C#, Python, PowerShell, TypeScript, Azure Functions, Azure DevOps or GitHub pipelines, or equivalent technologies.
• Experience building Azure Policy definitions and initiatives, policy-as-code solutions, automated remediation, compliance dashboards, or control-evidence pipelines.
• Knowledge of Azure landing zones, management groups, subscriptions, Entra ID, role-based access control, resource lifecycle management, and cloud cost optimization.
• Experience operating services at enterprise scale, including incident response, root-cause analysis, health service monitoring, and reliability improvement.
• Experience applying AI or machine learning capabilities to engineering productivity, operations, detection, or remediation.
• Relevant Azure, security, DevOps, or cloud architecture certification.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process**.**