Principal Software Engineer

**Overview**

Microsoft Entra secures identities for billions of users - and, increasingly, for the AI agents acting on their behalf. Within Identity Security, the Conditional Access team owns the policy engine that decides, in real time on every sign-in, who gets access to what and under which conditions. It is the most consequential enforcement point in the Microsoft identity stack. We are now building the agentic layer on top of it: the Conditional Access Optimization Agent, an AI system that reasons over an organization's policies, surfaces gaps and risky configurations, and recommends and safely applies the changes that harden posture without breaking users.

We are hiring a **Principal Software Engineer** to set the technical direction for securing AI at Microsoft - both securing the agents we ship and using agents to secure our customers. It is a problem space that spans the Conditional Access policy engine, Identity Protection risk signals, and the emerging ag...