The Infrastructure and Developer Platform (IDP) team within the Microsoft Threat Protection (MTP) organization builds and maintains the infrastructure and developer platform that all Defender products rely on, in an unmtachable scale. This platform allows engineers across MTP to more easily deploy their services, lower costs, and increase security and reliability across our fleet.
Responsibilities
Serve as a hands-on Kubernetes subject matter expert, driving architecture, design, and implementation of scalable, secure, and resilient AKS-based solutions.
Design and implement cloud-native security solutions using Azure technologies, with a focus on container runtime protection, policy enforcement, and threat detection.
Own and deliver production-grade services with high availability, reliability, and performance across global AKS deployments.
Develop and maintain CI/CD pipelines, secure build systems, and automated testing frameworks tailored for Kubernetes workloads.
Drive observability and telemetry improvements, including logging, monitoring, alerting, and incident response for services.
Identify and implement innovative approaches to secure Kubernetes workloads at scale, including leveraging AI/ML for anomaly detection.
Contribute to strategic initiatives that shape Microsofts container security roadmap and influence industry best practices.
Mentor junior engineers and contribute to engineering culture through code reviews, design discussions, and knowledge sharing.
Demonstrate ownership and accountability for end-to-end delivery of features and services.
Exhibit growth mindset by continuously learning and adapting to new technologies, threats, and customer needs.
Influence engineering decisions and drive impact beyond the immediate team.
Requirements: Qualifications
Bachelors or Masters degree in Computer Science, Engineering, or a related technical field.
8+ years of professional software engineering experience, with a strong track record of delivering production-grade distributed systems.
Deep expertise in Kubernetes, including cluster architecture, workload orchestration, and security hardening e.g. RBAC, Workload Identity, Container Runtime Security.
Hands-on experience with containers (Docker) and container orchestration platforms (AKS, EKS, GKE).
Preferred:
Proficiency in one or more programming languages such as Go, C++, C, Python, or Java.
Experience building and operating cloud-native services on Azure or other public cloud platforms.
Strong understanding of site reliability engineering (SRE) principles, including observability, incident response, and automation.
Ability to work effectively with cross-functional teams and manage multiple priorities.
This position is open to all candidates.