Senior Technical Program Manager – CTJ – TS/SCI

Microsoft is a company where passionate innovators come to collaborate, envision what can be and take their careers further. This is a world of more possibilities, more innovation, more openness, and the sky is the limit thinking in a cloud-enabled world.

Microsoft’s Azure Data engineering team is leading the transformation of analytics in the world of data with products like databases, data integration, big data analytics, messaging & real-time analytics, and business intelligence. The products our portfolio include Microsoft Fabric, Azure SQL DB, Azure Cosmos DB, Azure PostgreSQL, Azure Data Factory, Azure Synapse Analytics, Azure Service Bus, Azure Event Grid, and Power BI. Our mission is to build the data platform for the age of AI, powering a new class of data-first applications and driving a data culture.

 

Within Azure Data, the databases team builds and maintains Microsoft’s operational Database systems. We store and manage data in a structured way to enable multitude of applications across various industries. We are on a journey to enable developer friendly, mission-critical, AI enabled operational Databases across relational, non-relational and OSS offerings.

 

We are the Security and Compliances (S&C) team within the Azure Databases pillar in the Azure Data organization and our mission is to offer the most secure database services on the planet – from on-premises data centers to the cloud. We focus on:

• Ensuring our customers have consistent security feature experience across Azure environments while developing and shipping industry-leading, differentiated security capabilities such as Always Encrypted or SQL Ledger;
• leading and enforcing standards across the three Secure Future Initiative principles;
• clarifying and ensuring that regulatory compliance, data privacy and secure development practices are prioritized and balanced to ensure the data our customers entrust to our services is safe and managed in a compliant manner, meeting even the most stringent federal customer requirements.

The Azure Databases pillar is part of the Azure Data organization and oversees all the operational data management services including Azure SQL Database, CosmosDB, as well as the services based on open-source relational database engines such as PostgreSQL and MySQL. Our services are a top choice for governments, enterprises, ISVs, and application developers looking to disrupt markets and transform their existing business. 

 

The Azure Databases pillar along with all of Azure is expanding our footprint in the Government space with our mission-critical cloud, delivering breakthrough innovation and security to government customers and their partners. With world-class security, protection, and compliance, agencies can accelerate cloud adoption with confidence, in a consistent hybrid environment designed for flexibility and scale. Azure Government enables innovation with deeply integrated cloud services, advanced analytics, and an open application platform, that provides the building blocks to rapidly develop, deploy and manage intelligent solutions. Government customers can leverage the vast network of Microsoft’s technology partners and diverse marketplace offerings, to advance their mission and serve their citizens.  

 

We do not just value differences or different perspectives. We seek them out and invite them in so we can tap into the collective power of everyone in the company. As a result, our customers are better served.

 

The S&C team is looking for a Senior Technical Program Manager with a proven track record in managing multiple security frameworks and regulatory compliance processes and resulting certifications end-to-end.  This role will be critical in ensuring our operational database cloud services meet the stringent security requirements set by the Federal Risk and Authorization Management Program (FedRAMP). The ideal candidate will have knowledge of implementing cloud computing, online services, enterprise software development, engineering and/or operations at scale.  You will collaborate to ensure our portfolio of operational data stores are delivered with consistency and in a compliant manner across all clouds.  You will use your experience and skills to identify and resolve complex opportunities and gaps in the implementation of compliance features and processes across offerings. Partner with software engineering, legal, Azure compliance, Azure security and other divisions to design scalable, secure, and compliant solutions that meet even the most stringent requirements of both public and private sectors.  You will develop and manage governance programs and processes to ensure that specific compliance requirements and standards are met throughout the development lifecycle. You will define success criteria and performance metrics and lead teams to partner with others to collect performance metrics. 

 

Security, compliances, and data privacy are top concerns for our customers and the S&C team plays a pivotal role in drawing new businesses to our platform by being “built on trust”.

 

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Analysis of Customer and Market Signals –
  • Collaborate across product offering teams, sales, compliance teams, and legal to understand and specify compliance experiences across multiple groups or divisions.
  • Establish clarity of patterns of root problems and how it relates with previously seen trends across customers; determine the customers/sectors (internal and external) impacted and provides research evidence to recommend priorities.  
  • Ensures alignment between the customer (internal and external), compliance, internal stakeholders, and the goals of and strategy of Microsoft.
• Product/Service Definition –
  • Partner with engineering, compliance and legal teams to design architecture and integrate customer solutions that address priority customers and regulatory compliance needs. 
  • Engages in active risk management (proactive and reactive) to identify risks and propose mitigations for risks using data (e.g., telemetry, usage, net satisfaction, customer satisfaction).
• Product/Service Development –
  • Collaborates and coordinates across organizations to ensure alignment on product management and release, including tradeoffs, adjustments, and improvements as feasible.
  • Manages governance programs and processes to ensure that specific performance requirements and standards are met throughout the development lifecycle (e.g., quality, compliance, privacy, security, safety, accessibility).
• Product/Service Performance –
  • Leverages customer listening systems, telemetry, engagements, etc., to develop insights into service performance, customer needs, and/or compliance adherence.
  • Forms hypotheses to complex technical needs, performs experiments, and iterates to drive improvement in specific performance metrics.

Embody our culture and values

Qualifications

Required/Minimum Qualifications:

• Bachelor’s Degree AND 4+ years’ experience in engineering, product/technical program management, data analysis, or product development
  • or equivalent experience.
• 2+ years’ experience managing cross-functional and/or cross-team projects
• Professional experience in software development compliance, information protection, data security/privacy, or data governance.
• Demonstrated knowledge of security frameworks such as NIST (National Institute of Standards and Technology) Cybersecurity Framework (including v 2.0), ISO (International Organization for Standardization) 27001/27002, SOC (Service Organization Control) 2, CMM (Capability Maturity Model) and FedRAMP (Federal Risk and Authorization Management Program)
• Direct experience with software engineering requirements to pass the FedRAMP (Federal Risk and Authorization Management Program) Authorization Process. 

Other Requirements

Security Clearance Requirements: Candidates must be able to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:

• Candidates must have an active TS/SCI and be willing to upgrade to TS/SCI (with polygraph). This role will require candidates to maintain the TS/SCI (with polygraph) clearance. Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. Failure to maintain or obtain the appropriate clearance and/or customer screening requirements may result in employment action up to and including termination.
• Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.
• Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
• Citizenship & Citizenship Verification: This position requires verification of U.S. citizenship due to citizenship-based legal restrictions. Specifically, this position supports United States federal, state, and/or local United States government agency customer and is subject to certain citizenship-based restrictions where required or permitted by applicable law. To meet this legal requirement, citizenship will be verified via a valid passport, or other approved documents, or verified US government Clearance

Preferred/Additional Qualifications

• 1+ years data analysis and data analytics experience.
• 1+ years of programming experience, for example, in TSQL, Powershell, RUST, Java, C++, Python.
• Relevant certifications such as CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional) are highly desirable.
• Demonstrated leadership experience across various business functions in a highly matrixed organization structure.
• Proven ability to engage with various business functions from engineering to executive levels.
• Experience in cloud service engineering lifecycle and live site operation at cloud scale.
• Demonstrated stakeholder management including identification, managing expectations, prioritizing concerns and planning.
• Knowledge of risk management, the process of measuring, or assessing risk and then developing strategies to manage risk.

Technical Program Management IC4 – The typical base pay range for this role across the U.S. is USD $117,200 – $229,200 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $153,600 – $250,200 per year.

Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay

Microsoft will accept applications for the role until December 9, 2024

 

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances.  We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form.

 

Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.

 

#azdat #azuredata #azuredatabasesecurity #azuredatabasecompliance