Site Reliability Engineer II

Digital Security & Resilience (DSR)

The mission of Microsoft Digital is to power, protect, and transform Microsoft as the voice of our digital transition in the market. ​​​​​​As part of Microsoft’s Cloud + AI Group, we are responsible for building, managing, and securing the platform, products, processes, and services that powers Microsoft. We build, maintain, and implement a cloud-first approach to our technology and experiences, from custom-built business solutions developing our campus of the future and our productivity and collaboration experiences like Teams and SharePoint, to horizontal 3rd party solutions like SAP and Adobe. As a steward of Microsoft and our customer’s data, a core function of Microsoft Digital is ensuring the security of every aspect of the business. Microsoft Digital is responsible for company-wide information security and compliance, with a strategic focus on information protection, assessment, awareness, governance, and enterprise business continuity. Microsoft Digital’s charter is also to influence and work alongside engineers across the company and with strategic partners to build and grow their cloud products and services. As customer zero, we deploy these services inside Microsoft and then share best practices with enterprise customers at scale across the globe. We have exciting opportunities for you to innovate, influence, transform, inspire and grow within our organization and we encourage you to apply to learn more! 

Security boundaries have changed, and identity is the new perimeter.  With such a shift, there is a strong emphasis on carefully analyzing, and in many cases, hitting Refresh on the components that comprise the enterprise identity and access management platforms as we know them. 

Microsoft is seeking an identity focused site reliability engineer to join the Digital Security & Resilience (DSR) organization as we undergo the journey to ensure that the right identities get access to the right resources at the right time, protected each step of the way. 

With your experience and knowledge of Active Directory (AD), Azure Active Directory (AAD), Azure Cloud infrastructure, Windows Server OS, enterprise infrastructure, Programming/scripting and overall service health, you will champion our own identity-centric digital transformation and support hundreds of thousands of employees as they seek to empower every person on the planet to accomplish more.

Responsibilities

Key responsibilities: 

Design, implement and run mission critical large enterprise cloud identity infrastructure with Azure Active Directory (AAD), Active Directory (AD) and related cloud technologies.

Perform cloud identity infrastructure service implementations, performance analysis, optimizations, and monitoring.

Own, triage, investigate and resolve service issues.

Identify opportunities and drive the implementation of automation to improve service health, manageability, reliability, and telemetry.

Ability to read, write, configure, design, and script end-to-end service telemetry, alerting and self-healing capabilities for platforms.

Author functional and technical documentation.

Communicate on a deeply technical level with product engineering, project management and operations teams to improve and optimize products, improve infrastructure, and evolve services.

Remain current on new technologies, methods and procedures including, but not limited to, coding practices, SRE/DevOps Principles, Continuous Integration and Continuous Deployment (CI/CD).

Qualifications

Required Qualifications: 

Experience in designing and implementing Active Directory, Azure Active Directory and Azure Active Directory Domain Services with experience integrating on-premises Active Directory with Azure AD (using e.g., Azure AD Connect, Active Directory Federation Services or similar cloud identity experience).

Experience with envisioning and deploying modern identity solutions (e.g., Azure AD MFA, Azure AD Conditional Access, Azure AD Privileged Identity Management, Azure AD B2B, Azure AD Application Proxy  or similar cloud identity technologies).

Experience in scripting or programming with PowerShell, C#, or similar languages.

The successful candidate must be a U.S. Citizen.

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings.

-Citizenship Verification: This position requires verification of US Citizenship to meet federal government security requirements.

-Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

Preferred Qualifications:

Further experience with Windows System Administration, Certificates, PKI, DNS, Networking, Virtualization.

Experience with OS Internals concepts, load balancing, geo-redundancy, CDN and VPN technologies.

#DSR

#MSD

#MSFED

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.