Base Salary
$120k - $235k/yr
Responsibilities
- Design, implement, and operate L4 and L7 ingress components, including gateways, proxies, load balancing, and routing policy.
- Own TLS termination and certificate lifecycle, HTTP/2 connection management, gRPC routing and streaming, and protocol performance.
- Build and validate resiliency using health-based routing, retries, hedging, circuit breaking, load shedding, rate limiting, regional failover, fault injection, and load testing.
- Improve edge security through DDoS detection and mitigation, WAF and abuse-mitigation policies, tenant isolation, and application-layer defenses.
- Integrate and tune Azure Front Door and related edge services with first-party gateway components.
- Instrument ingress systems and lead incident response, root-cause analysis, and follow-up improvements.
- Partner with service teams on onboarding, capacity, traffic shaping, and engineering reviews.
Requirements
- Bachelor’s degree in Computer Science or a related technical field and 4+ years of technical engineering experience coding in languages such as C, C++, C#, Java, JavaScript, or Python, or equivalent experience.
- Preferred qualifications include a master’s degree with 6+ years of experience, or a bachelor’s degree with 8+ years of experience, or equivalent experience.
- Proven knowledge of L4/L7 networking, TCP behavior, load balancing, proxying, routing, DNS, and transport- versus application-level tradeoffs.
- Practical experience with TLS, HTTP/2, gRPC, certificate management, connection tuning, multiplexing, packet captures, and traces.
- Production experience with C# or Go and willingness to work fluently in both.
- Experience designing resilient services, operating production systems, participating in on-call, debugging live sites, and improving systems after incidents.
- Hands-on experience with Azure Front Door, Azure networking, or comparable CDN and global edge platforms.
- Experience with DDoS protection, attack detection and mitigation, rate limiting, and bot management.
- Experience running ingress in Kubernetes environments, including service mesh and Envoy-based data planes.
- Familiarity with multi-tenant SaaS traffic patterns and performance analysis or capacity planning for high-throughput, low-latency systems.
- Ability to pass Microsoft Cloud Background Check and applicable customer or government security screening requirements.
Benefits
- Certain roles may be eligible for benefits and other compensation.
- Applications are accepted on an ongoing basis until the position is filled, with the position open for a minimum of 5 days.
Tech Stack
About Microsoft
Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. Because impact matters. Microsoft operates in 190 countries and is made up of approximately 228,000 passionate employees worldwide.