Senior Software Engineer United States Washington Redmond

Job description

Design, implement, and operate L4 and L7 ingress components — gateways, proxies, load balancing and routing policy — that carry Dynamics 365 and Power Platform traffic into our clusters. Own the protocol layer: TLS termination and certificate lifecycle, HTTP/2 connection management, gRPC routing and streaming behavior, and the performance characteristics of each. Build resiliency into the request path through health-based routing, retries and hedging, circuit breaking, load shedding, rate limiting, and regional failover, and prove the behavior through fault injection and load testing. Strengthen the security posture of the edge, including DDoS detection and mitigation, WAF and abuse-mitigation policy, tenant isolation, and defense against application-layer attack patterns. Integrate and tune Azure Front Door and related edge services alongside our first-party gateway components, and make deliberate decisions about which layer solves which problem. Instrument the ingress path so that latency, error, and saturation questions can be answered in minutes, and drive incident response, root-cause analysis, and the follow-through that keeps the same failure from repeating. Partner with service teams across Dynamics 365, Power Platform, and Agent 365 on onboarding, capacity, and traffic-shaping decisions, and raise the engineering bar through design and code review. Bachelor's Degree in Computer Science or related technical field AND 4+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python These requirements include but are not limited to the following specialized security screenings: Master's Degree in Computer Science or related technical field AND 6+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR Bachelor's Degree in Computer Science or related technical field AND 8+ years technical engineering experience with coding in languages including, but not limited to, C, C++, C#, Java, JavaScript, or Python OR equivalent experience. Proven knowledge of L4 and L7 networking: TCP connection behavior, load balancing, proxying, routing, DNS, and the tradeoffs between transport-level and application-level handling. Practical depth in TLS, HTTP/2, and gRPC, including certificate management, handshake and connection tuning, multiplexing behavior, and diagnosing protocol-level failures from packet captures and traces. Production experience with C# or Go, and the willingness to work fluently in both. Demonstrated experience making services resilient under stress — designing for graceful degradation, and validating it rather than assuming it. Experience operating what you build, including on-call ownership, live-site debugging, and post-incident improvement. Hands-on experience with Azure Front Door, Azure networking, or comparable CDN and global edge platforms. Direct experience with DDoS protection: volumetric and application-layer attack detection, mitigation policy, rate limiting, and bot management. Experience running ingress in Kubernetes environments, including service mesh and Envoy-based data planes. Familiarity with multi-tenant SaaS traffic patterns, such as those in Dynamics 365 or Power Platform, and the isolation and fairness problems they create. Background in performance analysis and capacity planning for high-throughput, low-latency systems.