Security Operations Engineer II

The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.

Security represents one of the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. The Office of the Chief Information Security Officer (CISO) is accountable for managing and prioritizing cybersecurity risks for Microsoft. This team oversees the company’s overall cyber defense, including the security of Microsoft products and business operations, and collaborates with Engineering teams to advance Secure Future Initiative (SFI) objectives.

Security is a core priority for Microsoft, and strong Identity and Access Management protections are essential to protecting Microsoft at global scale. We are looking for an experienced Individual Contributor to join the IAM Protection team and drive security operations, remediation, and execution across identity platforms. This role combines identity security expertise, data-driven operational analysis, and program execution to identify and reduce security risks, strengthen governance, and improve the overall identity security posture. The role will work closely with Software Engineers and partner teams to translate security requirements into actionable engineering improvements, leveraging automation, telemetry, and tools such as Power BI and Azure DevOps to drive measurable outcomes and enable secure, scalable identity operations.

Responsibilities

• Drive execution of identity security operations and remediation initiatives, partnering with Software Engineering teams to identify, prioritize, and address security risks across identity platforms.

• Conduct identity security assessments and track remediation across authentication, authorization, application identities, privileged access, and identity lifecycle management.

• Analyze security posture, operational health, access risks, and remediation trends using telemetry, operational data, and enterprise reporting tools.