Cloud Network Engineer II (Security)

Job description

**Microsoft Digital(MSD)** builds and manages the critical products and services that Microsoft runs on.

We boldly pursue big ideas that power transformational advances at Microsoft and for our customers, while helping Microsoft teams work smarter, faster, and more securely every day.

Microsoft Digital employees have deep technical and business expertise, customer insights, and a clear point of view that comes from first-hand, large-scale experience with Microsoft and industry solutions.

We are engineers, technology leaders and experts, digital transformation change agents, and customer advocates.

MSD's Infrastructure and Engineering Services (IES) builds and operates the services that enable our users to do their best work.

As a Cloud Network Engineer II (Security), you will perform a key role in delivering the core infrastructure for Microsoft's Remote Access and Edge services.

You will implement and operate modern security infrastructure, in the cloud and on-prem, to enable secure and performant network access to our users.

This role requires an experienced engineer with a background in both network security as well as cybersecurity strategy, policy, compliance and tuning.

Penetration testing experience is also a plus, though not a core requirement.

Most important is a security professional’s mindset, continuous security improvement of our services is the goal!

This position is located at the Redmond campus with 3 days per week work in the office and 2 days per week work from home.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more.

As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals.

Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

**Responsibilities**

**Primary Responsibilities:**

**Network Design and Implementation**

+ You will apply Knowledge of Networks, Industry Trends, and Field Data towards implementation and operations.
+ Hybrid connectivity / unified network fabric – you will translate high-level design into low-level design and collaboration.
+ Design Reviews and Quality Assurance – You will participate or contribute to network design or code reviews.

**Maintain and Operate Networks**

+ You will monitor, analyze & debug, and troubleshoot network infrastructure; participate in on-call/Designated Responsible Individual (DRI) duties and create root cause analysis for network incidents.
+ Continuous Improvement, testing and validation of network components.
+ Deployment Management - You will work within a team of engineers to manage network deployments, work with a machine-readable definition of the network deployment.
+ You will troubleshoot network routing protocols (e.g., IPv4, IPv6, OSPF, BGP), TCP/UDP/HTTP(s), and overlay technologies such as EVPN, VXLAN, MLAG.
+ You have network and security management expertise to drive compliance against security objectives.
+ You will demonstrate proficiency in Infrastructure as Code (IaC) practices.

This includes the ability to:

+ Design and manage deployment pipelines
+ Author and maintain Bicep templates
+ Handle pull request workflows effectively
+ Deploy and update both new and existing cloud network infrastructure
+ In addition, expertise in LLMs and SLMs will be considered a significant asset, bringing added value to the team’s innovation and automation capabilities.

**Supporting People and Execution**

+ Collaboration - Collaborate within and across teams by proactively sharing information with an appropriate level of detail for their audience; overcome obstacles by resolving conflicts and issues across interdependent teams and engage with partners and stakeholders so issues can be resolved, and mutual objectives are met.
+ Mentorship / Development - Mentor and provide feedback to other engineers, while also proactively seeking mentorship and feedback from others; share ideas and insights for improving team-oriented behaviors, including DevOps and live site handling skills.

**Qualifications**

**Required Qualifications:**

+ Bachelor's Degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or related field AND 2+ years technical experience in network design, development, and automation
+ OR Master's Degree in Electrical Engineering, Optical Engineering, Computer Science, Information Technology, or related field AND 1+ years technical experience in network design, development, and automation
+ OR equivalent experience.
+ 2+ years experience in network security.
+ 2+ years experience in cybersecurity strategy, policy, compliance and tuning.
+ 2+ years experience in continuous security improvement of services.

**Additional Requirementes:**

Ability to meet Microsoft, customer and/or government security screening requirements are required for this role.

These requirements include, but are not limited to the following specialized security screenings:

+ Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.

**Preferred Qualifications:**

+ Proficient with penetration testing.
+ 3 + years scripting skills (Perl, Python, PowerShell, and C# are preferred, but not a strict requirement) in both Linux and Windows environment.

Cloud Network Engineering IC3 - The typical base pay range for this role across the U.S. is USD $100,600 - $199,000 per year.

There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $131,400 - $215,400 per year.

Certain roles may be eligible for benefits and other compensation.

Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

Microsoft will accept applications for the role until October 30, 2025.

#MSD

#MSDJOBS

#IESJOBS

Microsoft is an equal opportunity employer.

Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations (https://careers.microsoft.com/v2/global/en/accessibility.html) .

Required Skill Profession

Other General