Experience Inc. Jobs

The Infrastructure and Developer Platform (IDP) team within the Microsoft Threat Protection (MTP) organization builds and maintains the infrastructure and developer platform that almost all Defender products (Defender for Endpoint, Defender for Identity, etc.) rely on. This platform allows engineers across MTP to more easily deploy their services, lower costs, and increase security and reliability across our fleet. This position will specifically focus on Azure Kubernetes Security within the organization.

The IDP team is at the heart of Microsoft's security infrastructure, providing the essential tools and frameworks that empower our engineers to innovate and deliver cutting-edge security solutions. Our platform is designed to streamline the deployment process, enhance cost-efficiency, and bolster the security and reliability of our services. By leveraging the latest technologies and best practices, we ensure that our Defender products operate seamlessly and securely, protecting millions of users worldwide.

Why Join Us:

• Be part of a dynamic and innovative team that is responsible for security components in one of the largest Kuberentes fleets in the world.

• Work on cutting-edge technologies and make a significant impact on the developer community.

• Enjoy a collaborative and inclusive work environment with opportunities for growth and development

Responsibilities

• Develop and enforce RBAC policies, network segmentation, workload identity, and secret management in Kubernetes environments.

• Build and maintain security automation for policy enforcement (OPA/Gatekeeper/Kyverno), runtime protection (Falco, Aqua), and vulnerability scanning.

• Improve supply chain security, ensuring that container image scanning, SBOM (Software Bill of Materials), and policy checks are integrated into CI/CD workflows.

• Ensure secure configurations for all IAC environments

• Work with security teams to develop and refine Kubernetes security guidelines, internal documentation, and threat models.

Qualifications

• 2-5 years of experience in software engineering, utilizing C# or GoLang

• Bachelor’s Degree AND 4+ years’ experience in engineering, product/technical program management, data analysis, or product development OR equivalent experience.

• Strong understanding of Kubernetes security concepts, including network policies, RBAC, workload identity, container runtime security, and supply chain security.

• Hands-on experience with Kubernetes on major cloud providers (Azure AKS, AWS EKS, GCP GKE) and security best practices for cloud-native workloads.

• Familiarity with Terraform, Pulumi, or other IaC tools to manage Kubernetes deployments securely.

• Experience implementing secure CI/CD pipelines, image scanning, policy enforcement (OPA/Gatekeeper/Kyverno), and runtime security tools (Falco, Aqua, etc.).

• Knowledge of detecting, analyzing, and responding to security incidents in Kubernetes environments.

• Experience with container-based development, including Docker and Kubernetes.

• Understanding of Azure Kubernetes Service (AKS) security features, including Azure Policy, Microsoft Defender for Containers, Azure AD workload identity, and confidential computing.

• Ability to work effectively with cross-functional teams and manage multiple priorities.

Preferred Qualifications:

• CKA, CKS, CISSP, or other relevant security and Kubernetes certifications.

• Experience building/creating Kubernetes Operators

• Experience with security frameworks such as NIST, CIS Benchmarks, and PCI-DSS, and ability to assess and mitigate risks in Kubernetes environments.

Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations (https://careers.microsoft.com/v2/global/en/accessibility.html) .