Principal Software Engineering Manager (Windows Hardware Security)

Quick Facts

• Role: Principal Software Engineering Manager for Windows Hardware Security

Description

Lead the engineering strategy and execution for Windows Hardware Security, spanning Microsoft Pluton, hardware and firmware security, hardware-rooted platform security capabilities, and cloud-based device attestation services. Drive a cohesive chip-to-cloud trust architecture and advance security-critical software, firmware, and services across the Windows ecosystem and cloud.

Responsibilities

• Lead engineering strategy and execution for Windows Hardware Security: Microsoft Pluton, hardware/firmware security, hardware-rooted platform security, and cloud attestation services

• Define and drive chip-to-cloud security architecture connecting hardware roots of trust to Windows and cloud security capabilities

• Advance Microsoft Pluton across hardware, firmware, operating system, and service boundaries

• Lead the design, development, delivery, and operation of Windows attestation services for identity, integrity, and trusted security state

• Deliver security-critical software, firmware, and services with focus on security, reliability, scalability, performance, quality, and operational excellence

• Partner with silicon vendors, device manufacturers, and standards organizations to influence hardware security architecture

• Identify emerging threats and translate them into engineering strategy, roadmaps, and systematic improvements

• Drive engineering excellence across product engineering and cloud development (architecture, testing, telemetry, reliability, incident response, secure development, live-site operations)

• Make cross-organizational tradeoffs and drive accountability for customer outcomes

• Build, coach, and grow engineering managers and engineers; foster curiosity, collaboration, accountability, and continuous learning

• Represent Windows Security with senior internal/external partners on critical hardware, platform security, and attestation

• Leverage emerging technologies (including AI) to improve engineering effectiveness and security analysis

Requirements

• Bachelor’s degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding (C, C++, C#, Java, JavaScript, Python) OR equivalent experience

• Ability to meet Microsoft, customer and/or government security screening requirements, including passing the Microsoft Cloud background check upon hire/transfer and every two years

• Preferred: Bachelor’s degree AND 10+ years technical engineering experience; 6+ years people management experience

• Experience building/shipping/operating security-critical software, OS components, embedded systems, firmware, hardware-integrated software, or large-scale cloud services

• Experience leading complex multi-team engineering programs and defining technical strategy with measurable outcomes

• Experience with OS/platform/hardware security architecture and hardware roots of trust, secure boot, firmware security, cryptography, device identity, TPM, confidential computing, and remote attestation

• Experience with highly available cloud services with security-sensitive workloads and demanding reliability requirements