**Overview**

We are looking for a **Prinicpal Software Engineer** for the **Policy & Configuration** team owns the deployment control plane for Microsoft Threat Protection. It controls how every security service deploys across regions and sovereign clouds. The team is replacing a legacy configuration system with .NET Aspire and encoding deployment rules, data-residency constraints, and compliance policies into the toolchain as Roslyn analyzers, CI gates, and typed annotations. The compiler catches what used to break at deploy time. Half the work is architecture. half is cross-org advocacy with partner platform teams. Everything the tool does gets pushed upstream into Azure and .NET. Small team. High leverage.

**Responsibilities**

This role is for an Principal Software Engineer who wants to define how deployment configuration works across a platform, not just build what's asked.

Responsibilities include:

1.
2. Design the migration path...