This role pays more than
67%
of similar roles. Most pay
$162,037–$216,300
— the shaded band above.
At the midpoint, this role pays about
$209k
versus about
$189k
for comparable roles.
Based on 240 similar postings.
Employer
About Microsoft
Microsoft Corporation is a global technology leader producing software, hardware, and cloud services including Windows, Office 365, Azure cloud platform, Xbox gaming, and Surface devices. Industry: Software & Cloud Computing
Microsoft currently has
597 open roles
on FindRole.
Listed pay typically runs
$119,800–$234,700
across 570 roles with salary data.
Principal Security Engineer
The Principal Security Engineer joins the Data Processing Unit team to develop and enhance security features for high-performance ASICs designed to handle large data streams. In this role, you will design and implement cryptographically secure flows for boot, certification, attestation, and manufacturing while driving the architecture of the DPU’s Secure Enclave for both boot and runtime services. You will collaborate with hardware engineers, firmware engineers, and system architects to integrate these solutions into cloud scenarios. The role requires expertise in low-level programming, cryptography, security, and distributed systems. Candidates should be proficient in languages such as C, C++, C#, Java, JavaScript, Python, or Rust. Specific technical experience includes developing crypto libraries, working with tools like OpenSSL or Mbed TLS, implementing Post-Quantum Cryptography, and developing Boot ROM code and secure enclave software.
What does a Security Engineer earn?
Median $193565 from 98 postings across 44 companies.
Design and implement cryptographically secure flows for boot, certification, attestation, and manufacturing.
Transition existing systems from classical cryptography to emerging Post-Quantum Cryptography algorithms.
Drive the design and architecture of the DPU’s Secure Enclave for both boot and runtime services.
Develop high-performance runtime services and software that securely boots and attests the DPU.
Integrate the DPU solution into various cloud scenarios and applications within the Azure ecosystem.
Identify and implement technical improvements to enhance design, efficiency, and team productivity.
What we're looking for
Bachelor's degree in Computer Science or related technical field and 6+ years of engineering experience coding in languages like C, C++, C#, Java, JavaScript, or Python (or equivalent).
Ability to pass the Microsoft Cloud Background Check.
4+ years of experience in embedded software development and system design (preferred).
3+ years developing crypto libraries including symmetric, asymmetric, hashing, and Public-key Cryptography Standards (preferred).
4+ years working with cryptographic tools such as OpenSSL, Mbed TLS, or SymCrypt (preferred).
Recent knowledge of post-quantum cryptography techniques (preferred).
Experience developing Boot ROM code (preferred).
3+ years of experience developing secure enclave software and in SW/HW interfaces, simulations, and systems bring-up (preferred).
Azure
AWS
GCP
Python
C#
C++
Go
Rust
PowerShell
.NET
Entra ID
Active Directory
Windows
Linux
Cloud Security
Threat Modeling
Penetration Testing
Security Assessment
Automation
C
C++
Python
C#
Java
JavaScript
.NET
Linux
Unix
U-Boot
Kernel Development
Distributed Systems
Microservices
Azure
KQL
Kusto
Firmware
SPI
I2C
GPIO
UART
Telemetry