Today we have basic organisations, simple IAM primitives, early audit logs, analytics APIs, and admin APIs , but enterprise customers need much more. You will design and build the platform layer that powers organisation management, access control, compliance, and administrative tooling across Cursor's product surface.

This is a deeply technical IC role focused on building correct, secure, and scalable enterprise infrastructure , not gluing together vendor SDKs.

Responsibilities

• Build and evolve our organisation management system , multi-level org structures, groups, roles, lifecycle, and provisioning via SCIM, so admins can manage thousands of seats without friction.
• Design and implement RBAC with fine-grained roles, permissions, and resource scopes that cover organisations, teams, agents, and other resources , balancing security with developer ergonomics.
• Extend enterprise settings and policies , org-wide defaults, security policies (allowed models, MCPs, Tools, network restrictions), and configuration inheritance across different products.
• Deepen our audit logging infrastructure , comprehensive, queryable, tamper-evident audit trails that satisfy customer-specific compliance requirements.
• Build admin APIs and internal tooling that enterprise admins, customer success, and sales engineering depend on to manage organisations, investigate access issues, and onboard large accounts.
• Ship compliance features end-to-end , SSO enforcement, session management, allowlisting, data analytics, and the controls that procurement and security teams require before signing.
• Partner with product, security, and infrastructure teams to define enterprise platform abstractions that scale across the product without slowing down feature development.

What You'll Own

• Organisation management, RBAC and authorisation, enterprise settings and policies, audit logs, admin APIs, and compliance-related platform features.

What You Won't Own

• SSO/IdP integration at the protocol level (we use WorkOS) or billing and payments.

Security and Correctness

Security and correctness are part of the job, but the goal is to build systems with enough rigor and observability that enterprise operations are boring , not to manually triage every access control edge case.

Requirements

• You've built multi-tenant organisation or IAM systems in production and have opinions on permission models, role inheritance, and policy evaluation.
• You've shipped RBAC or ABAC systems and understand the tradeoffs between flexibility and complexity.
• You deeply care about correctness in authorisation and understand why 'fail closed' matters.
• You can hold the tension between 'ship enterprise features fast' and 'do not create security gaps or break existing access patterns.'
• You feel comfortable shipping features end-to-end , from database schema and API design to admin UI and documentation.

XML job scraping automation by YubHub

We're seeking a Senior Software Engineer to design and build core identity and isolation systems across Copilot experiences, partnering closely with Microsoft's central identity platform and related teams. You'll own significant features end-to-end,from design through production operation,tackling novel risks at the frontier of agential AI while applying proven identity patterns where they fit and inventing new ones where they don't.

This role demands solid backend engineering skills, working knowledge of modern consumer identity protocols, and the ability to ship reliable, secure systems at scale. You'll operate with a high degree of independence, make sound trade-offs between risk and velocity, and mentor others on the team.

Your work will secure AI experiences for hundreds of millions of users worldwide. Most identity roles focus on maintaining existing systems with well-understood patterns. Here, the problems are new,how do you manage authentication across chained agent tool calls? How do you enforce authorization boundaries when an agent's plan evolves at runtime? How do you isolate execution contexts that share memory and data,and your code ships into a product operating under real-world adversarial pressure?

Microsoft's mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

XML job scraping automation by YubHub

We are looking for a Senior Software Engineer to join our team. Copilot is becoming an autonomous system that reasons, plans, and acts on behalf of hundreds of millions of users,across consumer and enterprise experiences, surfaces, and modalities. It books meetings, drafts documents, executes multi-step workflows, and orchestrates actions across tools, data, and services. The scope and autonomy are expanding fast. So is the trust surface. Copilot Security & Trust Engineering makes Copilot a trusted companion,safe to use without fear as autonomy becomes the default.

The Identity & Isolation team owns the foundational systems that make this possible: authentication and identity experiences that reduce friction and increase trust, workload isolation and adaptive sandboxing that constrain agent authority and blast radius, and agentic access control that governs what Copilot can do, with what data, and on whose behalf,continuously and at runtime.

As Copilot for consumers depends on a rock-solid identity and isolation foundation that makes personalized AI experiences safe and seamless across Windows, Edge, web, and mobile, we’re seeking a Senior Software Engineer to design and build core identity and isolation systems across Copilot experiences, partnering closely with Microsoft’s central identity platform and related teams. You’ll own significant features end-to-end,from design through production operation,tackling novel risks at the frontier of agential AI while applying proven identity patterns where they fit and inventing new ones where they don’t.

This role demands solid backend engineering skills, working knowledge of modern consumer identity protocols, and the ability to ship reliable, secure systems at scale. You’ll operate with a high degree of independence, make sound trade-offs between risk and velocity, and mentor others on the team.

Your work will secure AI experiences for hundreds of millions of users worldwide. Most identity roles focus on maintaining existing systems with well-understood patterns. Here, the problems are new,how do you manage authentication across chained agent tool calls? How do you enforce authorization boundaries when an agent’s plan evolves at runtime? How do you isolate execution contexts that share memory and data,and your code ships into a product operating under real-world adversarial pressure?

XML job scraping automation by YubHub

We are looking for a Senior Software Engineer to join our team. Copilot is becoming an autonomous system that reasons, plans, and acts on behalf of hundreds of millions of users,across consumer and enterprise experiences, surfaces, and modalities. It books meetings, drafts documents, executes multi-step workflows, and orchestrates actions across tools, data, and services. The scope and autonomy are expanding fast. So is the trust surface. Copilot Security & Trust Engineering makes Copilot a trusted companion,safe to use without fear as autonomy becomes the default.

The Identity & Isolation team owns the foundational systems that make this possible: authentication and identity experiences that reduce friction and increase trust, workload isolation and adaptive sandboxing that constrain agent authority and blast radius, and agentic access control that governs what Copilot can do, with what data, and on whose behalf,continuously and at runtime.

As Copilot for consumers depends on a rock-solid identity and isolation foundation that makes personalized AI experiences safe and seamless across Windows, Edge, web, and mobile, we’re seeking a Senior Software Engineer to design and build core identity and isolation systems across Copilot experiences, partnering closely with Microsoft’s central identity platform and related teams.

You’ll own significant features end-to-end,from design through production operation,tackling novel risks at the frontier of agential AI while applying proven identity patterns where they fit and inventing new ones where they don’t. This role demands solid backend engineering skills, working knowledge of modern consumer identity protocols, and the ability to ship reliable, secure systems at scale. You’ll operate with a high degree of independence, make sound trade-offs between risk and velocity, and mentor others on the team.

Your work will secure AI experiences for hundreds of millions of users worldwide. Most identity roles focus on maintaining existing systems with well-understood patterns. Here, the problems are new,how do you manage authentication across chained agent tool calls? How do you enforce authorization boundaries when an agent’s plan evolves at runtime? How do you isolate execution contexts that share memory and data,and your code ships into a product operating under real-world adversarial pressure?

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

XML job scraping automation by YubHub