Principal Security Engineer

Microsoft Silicon, Cloud Hardware, and Infrastructure Engineering (SCHIE) is the team behind Microsoft’s expanding Cloud Infrastructure and responsible for powering Microsoft’s “Intelligent Cloud” mission. SCHIE delivers the core infrastructure and foundational technologies for Microsoft's over 200 online businesses including Bing, MSN, Office 365, Xbox Live, Teams, OneDrive, and the Microsoft Azure platform globally with our server and data center infrastructure, security and compliance, operations, globalization, and manageability solutions. Our focus is on smart growth, high efficiency, and delivering a trusted experience to customers and partners worldwide and we are looking for passionate, high-energy engineers to help achieve that mission.

The Data Processing Unit (DPU) team brings together state-of-the-art software and hardware expertise to create a highly programmable and high-performance ASIC with the capability to efficiently handle large data streams. Thanks to its integrated design, this solution empowers teams to operate with increased agility and deliver significantly superior performance compared to CPU-based alternatives.

We are looking for a Principal Security Engineer to join our team and help develop and enhance the DPU’s security features. In this role, you will be responsible for designing and implementing key software that securely boots and attests the DPU, as well as providing high performance runtime services. You will work closely with hardware engineers, firmware engineers, and system architects to ensure the DPU software stack meets the requirements of security, performance, and scalability. You will also collaborate with other teams across Microsoft to integrate the DPU solution into various cloud scenarios and applications. You will apply your expertise in low-level programming, cryptography, security, and distributed systems to deliver cutting-edge solutions that enable new possibilities for cloud computing.

Responsibilities

- Design and Implement cryptographically secure flows for boot, certification, attestation and manufacturing.

- Participate in the transition from classical cryptography to emerging Post-Quantum Cryptography algorithms.

- Drive evolution of the design and architecture of the DPU’s Secure Enclave, for both boot and runtime services

- Collaborate with other engineers ensure the successful execution of projects, to seamlessly integrate the DPU in the Azure ecosystem

- Identify and promote opportunities for design and/or improvements to enhance technical designs, efficiency and productivity within the team