Telemetry Engineering Operations Manager
Microsoft
Telemetry Engineering Operations Manager
Multiple Locations, United States
Save
Overview
The Cloud & AI organization accelerates Microsoft’s mission and bold ambitions to ensure that our company and industry is securing digital technology platforms, devices, and clouds in our customers’ heterogeneous environments, as well as ensuring the security of our own internal estate. Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. Microsoft is one of the largest enterprise service companies in the world.
We are hiring a Telemetry Engineering Operations Manager for the Telemetry Engineering team! This role plays a pivotal part in orchestrating the intake, triage, and execution of telemetry-related requests across engineering, product, and operational domains. It ensures that telemetry processes are scalable, standardized, and responsive to evolving business needs by driving the development of Standard Operating Procedures (SOPs), managing service onboarding, and coordinating cross-functional handoffs. The Operations Manager partners closely with engineering leads, product managers, and stakeholders such as the Global Hunting, Oversight, and Strategic Triage (Ghost) team and the Infrastructure and Configuration Engine (ICE) team to clarify ownership boundaries, resolve solutioning gaps, and maintain accountability for request fulfillment. By systematizing intake paths (e.g., predefined services, engineering asks, and ambiguous cases), the role enables efficient routing, reduces ad hoc decision-making, and supports strategic initiatives like heartbeat monitoring and backlog reduction. Success in this role requires proficiency in process design acumen, stakeholder engagement, and the ability to translate complex workflows into actionable playbooks that enhance telemetry reliability, compliance, and data aggregation at scale.
Microsoft’s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others, and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.
In alignment with our Microsoft values, we are committed to cultivating an inclusive work environment for all employees to positively impact our culture every day.
Qualifications
Required Qualifications:
- Master's Degree in Statistics, Mathematics, Computer Science or related field OR 7+ years of experience in software development lifecycle, large-scale computing, modeling, cyber security, anomaly detection, security operations center (SOC) detection, threat analytics, security incident and event management (SIEM), and information technology (IT) operations.
- 3+ years people management experience.
- 6+ years of experience in operations, program management, or engineering roles with a focus on telemetry, automation, or data systems.
Other Requirements:
Ability to meet Microsoft, customer and/or government security screening requirements are required for this role. These requirements include, but are not limited to the following specialized security screenings:
- Microsoft Cloud Background Check: This position will be required to pass the Microsoft Cloud background check upon hire/transfer and every two years thereafter.
- Citizenship Verification: This role will require access to information that is controlled for export under export control regulations, potentially under the U.S. International Traffic in Arms Regulations or Export Administration Regulations, the EU Dual Use Regulation, and/or other export control regulations. As a condition of employment, the successful candidate will be required to provide either proof of their country of citizenship or proof of their U.S. permanent residency or other protected status (e.g., under 8 U.S.C. 1324b(a)(3)) for assessment of eligibility to access the export controlled information. To meet this legal requirement, and as a condition of employment, the successful candidate’s citizenship will be verified with a valid passport. Lawful permanent residents, refugees, and asylees may verify status using other documents, where applicable.
Preferred Qualifications:
- Proven experience with telemetry pipelines, data cataloging, and enrichment workflows. Familiarity with platforms like MS Shield, Vanquish, HostIDS, and Geneva is highly beneficial.
- Ability to design scalable intake and triage processes, develop SOPs, and maintain operational playbooks. Experience in translating complex workflows into clear, customer-facing documentation is essential.
- Demonstrated success in managing cross-functional handoffs and collaborating with engineering, product, and operations teams. Should be able to clarify ownership boundaries and drive alignment across teams.
- Understanding of persona-based access models, data entitlement reviews, and privacy approval workflows. Experience in managing sensitive data requests and ensuring compliance with organizational standards is critical.
- Experience in backlog tracking, SLA adherence, and intake volume analysis. Ability to surface trends and risks through dashboards and reporting tools.
- Effective communication, adaptability, and leadership skills. Should be able to mentor others, elevate team outcomes, and contribute to a culture of continuous improvement and accountability.
Security Operations Engineering M5 - The typical base pay range for this role across the U.S. is USD $139,900 - $274,800 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $188,000 - $304,200 per year.
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
Microsoft will accept applications for the role until October 1, 2025.
#MSFTSecurity #CyberDefenseOperations
Responsibilities
- Lead Intake and Triage Processes: Design and manage structured intake paths for telemetry-related requests, distinguishing between known operational cases and complex engineering asks. Ensure efficient routing to appropriate teams and reduce ambiguity in request handling.
- Own Operational Handoffs and Escalations: Oversee the transition of telemetry issues from engineering to operations, particularly in scenarios like data drift or loss. Ensure timely escalation, follow-through, and resolution tracking across service owners and stakeholders.
- Drive Service Onboarding and Stakeholder Engagement: Manage onboarding workflows for partner teams such as Infrastructure and Configuration Engine (ICE) and Operations Substrate (OPS Sub), building operational muscle and fostering collaboration. Capture lessons learned to improve future onboarding efforts.
- Monitor Backlog and Service Level Agreement (SLA) Performance: Track intake volumes, backlog age, and SLA adherence across telemetry request queues. Develop dashboards and reporting mechanisms to surface trends and inform leadership decisions.
- Standardize and Document Operational Models: Create and maintain playbooks and SOPs that define prioritization models, escalation paths, and ownership boundaries. Ensure these models are externally communicable and scalable as the team expands its scope.
- Support Strategic Initiatives and Dependency Management:Coordinate delivery of strategic projects like heartbeat monitoring, ensuring external dependencies are tracked, escalated, and resolved. Report progress and risks to leadership with transparency.
- Enable Knowledge Management and Process Improvement: Address gaps in data cataloging, request tracking, and historical context by implementing centralized knowledge systems. Promote continuous improvement through retrospectives and stakeholder feedback.