OverviewThe Cloud & AI organization accelerates Microsoft's mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers' heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.
The Enterprise IAM Active Directory (AD) team engineers and operates secure, reliable, and resilient identity infrastructure supporting critical authentication services across Microsoft. We combine deep systems engineering with modern Site Reliability Engineering practices to improve availability, observability, automation, disaster recovery, and operational excellence.
We are looking for a passionate Site Reliability Engineer II to join our Enterprise IAM Active Directory team. In this role, you will engineer, operate, automate, and improve highly reliable and secure identity infrastructure that supports critical authentication services across Microsoft. You will work on Active Directory reliability, monitoring, incident response, automation, and disaster recovery while building solutions that continually improve service resilience and reduce operational toil. You'll also have opportunities to leverage AI, Copilot, and agentic technologies to accelerate troubleshooting, automate operational workflows, and help shape the next generation of intelligent identity operations.
Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Responsibilities- Engineer and operate highly available, secure, and resilient Active Directory services that support critical identity and authentication scenarios across Microsoft.
- Improve service reliability and operational excellence through automation, observability, telemetry, and proactive engineering that reduces operational toil and prevents recurring issues.
- Build intelligent automation and AI-assisted solutions that accelerate troubleshooting, correlate operational signals, and make complex identity infrastructure safer and easier to operate.
- Diagnose and resolve complex production issues across Active Directory, Windows Server, and supporting infrastructure, turning engineering insights into durable reliability improvements.
- Strengthen business continuity and service resilience by engineering and validating backup, recovery, disaster recovery, and site and regional failover capabilities.
- Collaborate across Enterprise IAM and partner engineering teams to advance modern SRE practices and build scalable, automated approaches to operating critical identity infrastructure.
- Embody our Culture and Values
QualificationsRequired Qualifications:- Bachelor's Degree in Computer Science or related technical field AND 2+ years technical engineering experience with coding in languages including, but not limited to, C#, Python, PowerShell OR equivalent experience.
Other Requirements:- Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include but are not limited to the following specialized security screenings:
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
Preferred Qualifications:- 2+ years software development experience using C#, Python, PowerShell, or another programming language to build automation, tools, or engineering solutions.
- 2+ years experience engineering, operating, or troubleshooting Windows Server and Active Directory Domain Services (AD DS), including core identity and authentication technologies.
- Experience debugging complex production systems using logs, metrics, monitoring, and telemetry to identify root causes and implement durable solutions.
- Experience applying Site Reliability Engineering principles, including observability, incident response, automation, reliability, resiliency, and safe production changes.
- Experience applying AI technologies, including large language models (LLMs), AI agents, Copilot, or intelligent automation, to software engineering, infrastructure, troubleshooting, or security scenarios.
- Experience with Active Directory technologies such as DNS, Kerberos, LDAP, Group Policy, replication, trusts, and Active Directory Sites and Services.
- Experience building production-quality automation, APIs, validation frameworks, or self-service infrastructure tooling.
- Experience developing AI-assisted or agentic solutions using LLMs, tool use, retrieval, evaluation, or workflow orchestration.
- Experience with monitoring, synthetic validation, telemetry correlation, automated diagnostics, or remediation.
- Experience with identity security, privileged access, vulnerability assessment, or security monitoring and detection.
- Experience with backup and recovery, disaster recovery, or site and regional failover for distributed infrastructure
#MSFTSecurity
Software Engineering IC3 - The typical base pay range for this role across the U.S. is USD $102,100 - $202,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $133,800 - $219,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
;br>
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about
requesting accommodations. 
