The Principal Security Architect in Microsoft Red Team Engineering will focus on enhancing the visibility, telemetry, detection, and operational security of Red Team operations. This role serves as the 'blue team to the Red Team', ensuring that authorized activities are distinguishable from genuine adversarial actions. The position requires collaboration with various teams across Microsoft to define effective visibility and drive the development of monitoring and detection capabilities. The architect will also shape the strategy for Red Team telemetry and operational security while providing technical leadership.

• Bachelor's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Ability to meet Microsoft, customer, and/or government security screening requirements.
• Master's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 12+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience.
• Experience in cybersecurity, including one or more areas such as security telemetry, detection engineering, security monitoring, incident response, threat analytics, cloud security, identity security, endpoint security, or offensive security infrastructure.
• Experience designing distributed services, data pipelines, automation, or large-scale security platforms.

• Define and drive the technical strategy and architecture for Red Team visibility, telemetry, detection, deconfliction, and operational security.
• Use live Red Team operations, security incidents, threat intelligence, and adversary activity to identify systemic visibility and control gaps.
• Architect and build scalable services and data pipelines that collect, normalize, enrich, and correlate Red Team telemetry.
• Drive the development of monitoring, hunting, detection, and alerting capabilities to contextualize Red Team activity.
• Build durable deconfliction capabilities that combine operational context, asset and identity information, and behavioral telemetry.
• Own and evolve the authoritative inventory of Red Team operational assets.
• Raise the engineering bar across Red Team systems through strong patterns for testing, reliability, and secure development.
• Provide hands-on technical leadership through architecture, implementation, reviews, debugging, and mentorship.
• Help ensure Microsoft can conduct authentic Red Team operations with strong visibility and control.

• Employees at Microsoft are often offered comprehensive, “world-class” benefits—including health and mental-wellness programs, competitive pay with bonuses and stock awards, and retirement/savings options. Time-off and flexibility are common, with generous vacation and holidays, parental and caregiver leave, and flexible work schedules, alongside learning support, employee resource groups, product discounts, and matching-gifts/volunteering programs. Specific benefits can vary by region.