Are you a cybersecurity, network, cloud, or datacenter engineer ready to expand your impact beyond a traditional engineering role?
Join Microsoft’s Internal Audit team, where technical professionals work with leadership to assess risk, strengthen resilience, and help shape the future of global cloud and datacenter operations.
In this auditor role, you will apply your engineering experience to evaluate complex systems, from hyperscale datacenters and cloud platforms to advanced security architectures and emerging AI technologies and determine how effectively they mitigate risk in practice.
If you want to understand how systems fail, scale, and improve, this role offers a unique opportunity to work where engineering excellence meets enterprise risk. It is a chance to move from building and operating systems to assess them across the enterprise.
Responsibilities
- Evaluate complex engineering environments including cloud platforms (Azure), datacenter infrastructure, network architecture, and cybersecurity controls.
- Assess risks and control effectiveness across domains such as identity & access, network security, production operations, supply chain, and resiliency.
- Lead and execute risk-based audit engagements across the full lifecycle—planning, fieldwork, reporting, and follow-up.
- Deliver audit reports by identifying and gathering support for potential issues and recommending solutions.
- Utilize organizational audit systems to manage projects, work papers, risk assessment, reporting, and reporting follow-up.
- Analyze real-world failure scenarios (“what could go wrong”) and identify systemic weaknesses across large-scale engineering environments.
- Provide actionable audit recommendations to improve reliability, scalability, and security posture of critical infrastructure.
- Partner directly with engineering, operations, and security teams to evaluate design decisions and risk mitigation strategies.
- Conduct deep technical reviews of emerging technologies, including AI/ML systems, cloud-native architectures, and advanced security tooling.
- Communicate technical risks clearly to both engineering teams and executive leadership.
- Continuously build audit expertise across cloud, datacenter operations, security engineering, and audit methodologies.
Qualifications
Required Qualifications:
- Bachelor's Degree AND 2+ years experience in engineering, product/technical program management, data analysis, or product development OR equivalent experience.
- 1+ year(s) of experience managing cross-functional and/or cross-team projects.
Preferred Qualifications:
- Bachelor's Degree AND 5+ years experience engineering, product/technical program management, data analysis, or product development OR equivalent experience.
- 3+ years of experience in one or more of the following areas:
- Cybersecurity engineering (SOC, threat detection, identity protection)
- Network engineering (routing, switching, network architecture, SDN)
- Cloud engineering (Azure, AWS, GCP infrastructure and platform services)
- Datacenter operations (facilities, hardware deployment, infrastructure lifecycle management)
- Experience assessing technical systems, security controls, and operational processes.
- Ability to translate technical concepts into structured risk insights and recommendations.
- Experience in one or more of the following specialized areas:
- Identity and Access Management (IAM), PKI, and secrets management
- Network security, segmentation, and DDoS protection
- Datacenter design, operations, and physical security
- Incident response, vulnerability management, and threat detection
- AI/ML systems, including model lifecycle management (training, validation, deployment)
- AI/ML risk management, including model drift, data quality, bias, and misuse scenarios
- Experience with cloud platforms, network architecture, and security engineering principles.
- Familiarity with security and risk management frameworks such as NIST, ISO 27001, COBIT, Zero Trust, and NIST AI RMF.
- Exposure to AI-enabled cloud services and enterprise-scale AI deployments.
- Exposure to large-scale distributed systems or hyperscale cloud environments.
- Industry certifications such as CISSP, CISA, CCNA, AZ-500, or equivalent.
- Analytical, problem-solving, and risk assessment skills.
Technical Program Management IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.
