Overview
Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end to end, simplified solutions. The Microsoft Security organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world.
Microsoft PKI Services (MPS) provides the trust infrastructure that enables secure communications across Microsoft’s cloud platforms and services. MPS designs, builds, and operates publicly trusted Certificate Authorities (CAs) that issue and manage digital certificates used to authenticate services, establish encrypted communications, and protect data for Microsoft and millions of customers worldwide. The team is responsible for the full lifecycle of Public Key Infrastructure (PKI) operations, including certificate issuance, key management, revocation, incident response, auditing, and adherence to globally recognized trust requirements. MSPKI operates in a highly transparent and externally governed environment, where compliance with browser root programs, industry standards, and public reporting expectations is required to maintain trust in Microsoft’s services.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
Responsibilities
-
Own MPS compliance with global public trust requirements to ensure the continued trustworthiness of Microsoft's public CAs.
-
Define and execute Microsoft’s PKI long term compliance strategy including alignment with evolving browser root program policies, audit frameworks (e.g., WebTrust), and emerging industry requirements.
-
Lead external incident response and reporting for compliance incidents involving Microsoft's public CAs including coordinating engagement with root programs, auditors, and industry stakeholders.
-
Serve as Microsoft’s primary technical representative to the CA/Browser Forum and related groups.
-
Drive standards advancement to improve global Internet trust.
Embody our culture and values
Qualifications
Required Qualifications:
-
Bachelor's Degree AND 12+ years experience in product/service/program management or software development OR equivalent experience.
Other Requirements:
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter
Preferred Qualifications:
-
8+ years experience contributing to consensus-driven technical industry standards bodies.
-
Experience operating or overseeing a publicly trusted CA.
-
Experience engaging with browser root programs (e.g., Chrome, Mozilla, Apple, Microsoft).
-
Working knowledge of the CA/Browser Forum governance model.
-
Background in applied cryptography, security engineering, identity infrastructure, or internet-scale security operations.
-
Experience navigating or leading response to publicly disclosed compliance or operational incidents.
-
Familiarity with emerging developments in PKI and cryptographic standards, such as certificate transparency, algorithm agility, short-lived certificates, or post-quantum cryptography.
-
Track record of producing high-quality technical documentation suitable for external publication, including policy documents, audit artifacts, or incident reports.
Product Management IC6 - The typical base pay range for this role across the U.S. is USD $165,600 - $296,400 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $220,800 - $331,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here:
https://careers.microsoft.com/us/en/us-corporate-pay
This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process.
