Job Description

The Azure Silicon Cloud Hardware Infrastructure and Engineering (SCHIE) team is instrumental in defining and delivering operational success for Azure that exceeds our customer's expectations. The HW Security Center of Excellence within the SCHIE organization is responsible for design and development of

Security Solutions

(Silicon, Firmware, Hardware) for Server and Rack Infrastructure Firmware for Microsoft's global Azure business. We work closely with Microsoft product groups, industry partners and researchers to architect and develop Security features and solutions that meet the requirements for our cloud services platforms at the lowest possible cost of ownership (TCO). We need to be always learning and insatiably curious. We need to be willing to lean into uncertainty, take risks and move quickly when we make mistakes, recognizing failure happens along the way to mastery and we need to be open to the ideas of others, where the success of others does not diminish our own.

We are looking for a highly motivated

Senior Firmware Engineer

with a background in security to work on Securing Azure Infrastructure, both for the existing Azure fleet and incoming new portfolio. You will be responsible to work with architects to understand the Security Requirements, designing and implementing security features for hardware and firmware systems that power Azure today. You have a passion for security, enjoy seeing your code light up features that come to life on hardware that will be responsible for securing Azure infrastructure. You have strong coding skills, debugging and troubleshooting abilities, with experience in firmware development. Additionally experience with some or all the following: firmware development, SoC bring-up, with Security primitives, bootloaders, platform initialization, board support package porting, peripherals such as PCIe, I2C, SPI, USB, UARTs. OS primitives, memory management, scheduling, interrupts, and multi-threading will be great.

Responsibilities

--------------------

Responsible for Designing and implementing key Security Features in firmware Responsible for definition of e2e flow of Security Features that span multiple sub systems on the server transcending from Manufacturing all the way to Azure Services Collaborate with cross-functional teams to debug issues at the cross section of multiple sub-systems Responsible to incorporate (SDL) throughout the development process with a Test Driven Quality first development mindset Solid understanding of security primitives, security ciphers, threat vectors, security mitigation strategies to close identified vulnerabilities. Design and implement firmware modules to support various hardware interfaces, including USB vNIC, SPI, I2C, PCIe, and other related protocols. Perform system-level debugging and troubleshooting to identify and resolve hardware/firmware-related issues. Develop and maintain firmware architecture, ensuring scalability, modularity, and maintainability. Perform system-level debugging and troubleshooting to identify and resolve hardware/firmware-related issues. Ability to adapt to changing project requirements and prioritize tasks effectively.

Qualifications

------------------

Bachelor's or master's degree in electrical engineering, Computer Engineering, Computer Science or a related field. 8+ years of professional experience in firmware developement. 3+ years of professional experience in firmware security. Demonstrated experience of hardware and firmware architecture, design and coding for solutions at scale Experience with secure boot, secure firmware updates, Attestation, SPDM, DICE, Secure recovery and secure debug workflows at scale

Preferred Qualifications:

Strong problem-solving and analytical skills Excellent written and verbal communication skills Working experience with architecting or implementing industry-standard security protocols, including secure communications), cryptographic algorithms, Public key infrastructure, key management technologies

Familiarity and understanding of Supply Chain Security


Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.