Software Engineer II - Agentic Sandbox

Azure Container Apps is part of the broader Azure organization, with a mission to empower developers to rapidly build, deploy, and operate highly scalable serverless and cloud-native applications without managing the underlying infrastructure.

The Azure Container Apps Sandboxes team is building a secure execution platform for the agentic era. Azure Container Apps Sandboxes provides fast, hardware-isolated compute environments for running untrusted and AI-generated code. Each sandbox offers an independent execution boundary with programmable lifecycle, networking, storage, and state-management capabilities.

The platform enables scenarios including AI agent tool execution, multi-tenant application platforms, interactive development environments, secure code execution, and ephemeral CI/CD workloads.

We are looking for a Software Engineer II to help build the next generation of Azure Container Apps Sandboxes. In this role, you will contribute to capabilities spanning sandbox provisioning, workload isolation, lifecycle management, networking, storage, observability, and large-scale orchestration.

This role is for engineers who care deeply about product quality, security, reliability, and end-to-end ownership. You will work closely with engineers, product managers, and partner teams to turn ambiguous requirements into secure and dependable platform capabilities.

Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees, we bring a growth mindset, innovate to empower others, and collaborate to realize our shared goals. We build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.

Responsibilities

• Design, implement, test, and operate capabilities for sandbox provisioning, orchestration, lifecycle management, and secure code execution.
• Build reliable control-plane and data-plane services that manage isolated, short-lived, and stateful compute environments at cloud scale.
• Contribute to capabilities such as rapid startup, burst scaling, scale-to-zero, suspend and resume, snapshots, persistent storage, and custom container images.
• Develop secure workload-isolation mechanisms across compute, networking, storage, identity, and secrets.
• Build networking features including egress policies, private connectivity, credential injection, and virtual network integration.
• Write and review high-quality production code with a focus on correctness, maintainability, performance, diagnosability, and security.
• Develop and improve public APIs and developer experiences across SDKs, command-line tools, infrastructure-as-code integrations, and the Azure portal.
• Create automated tests and validation systems covering functionality, security, workload isolation, performance, scalability, and fault tolerance.
• Use telemetry, experiments, customer feedback, and production insights to guide product improvements and engineering investments.
• Build observability capabilities, including metrics, tracing, logging, dashboards, and alerts, to understand platform and workload behavior.
• Participate in live-site operations, incident response, debugging, and post-incident hardening.
• Partner with engineers, product managers, security teams, and service partners to turn product scenarios into high-quality shipped solutions.
• Contribute to architecture discussions, engineering standards, code reviews, and development practices across the team.
• Take ownership of assigned problem areas and drive them from design and implementation through deployment and production operation.

Qualifications

Required/Minimum Qualifications

• Bachelor’s Degree in Computer Science, Engineering, or a related technical field and 4+ years of technical engineering experience coding in one or more languages including, but not limited to, C, C++, C#, Go, Java, Rust, or Python;

  OR equivalent experience.

• Experience designing, implementing, and operating distributed systems, cloud services, or platform components.
• Strong engineering fundamentals, including data structures, algorithms, systems design, testing, and debugging.
• Experience delivering production software with consideration for reliability, performance, security, and maintainability.
• Ability to independently own engineering tasks and collaborate effectively with engineers and partner teams.
• Strong problem-solving skills and the ability to debug complex issues in production environments.

Additional or Preferred Qualifications

• Experience with containers, OCI images, Kubernetes, container orchestration, or serverless platforms.
• Experience with virtualization technologies, microVMs, Linux internals, sandboxing, or workload isolation.
• Experience building or operating multi-tenant cloud services.
• Experience with cloud networking concepts, including virtual networks, private connectivity, DNS, proxies, firewalls, or network policy enforcement.
• Experience with identity, authorization, secrets management, and secure credential handling.
• Experience with snapshotting, checkpoint and restore, persistent storage, or distributed state-management systems.
• Experience building public APIs, SDKs, command-line tools, or infrastructure-as-code integrations.
• Experience building platforms for AI agents, secure code execution, development environments, or dynamically generated workloads.
• Experience with service observability, progressive delivery, incident response, and live-site operations.
• A strong product mindset and demonstrated ability to turn ambiguous requirements into reliable, user-focused solutions.
• Experience contributing to open-source projects is a plus.

Ability to meet Microsoft, customer, and/or government security-screening requirements is required for this role. These requirements include, but are not limited to:

Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud Background Check upon hire or transfer and every two years thereafter.

This position will be open for a minimum of 5 days, with applications accepted on an ongoing basis until the position is filled.

Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.