[Hiring] Staff Software Development Engineer - Windows Endpoint @BeyondTrust

Role Description

As Staff Software Development Engineer, you'll be the Windows kernel authority for the runtime enforcement layer of our Identity Security Platform. These components decide, in-kernel, whether to permit or deny each action an identity or AI agent attempts on a Windows endpoint.

You'll set the technical direction for kernel-mode enforcement on Windows and own it end to end. That means:

• Hooks that make the right call in real time, across the fleet, without breaking legitimate workloads.
• Peer engineers own the macOS and Linux enforcement surfaces.
• You share one policy language, one event schema, and one userspace agent with them, but Windows kernel-space is yours.

You know this layer better than anyone. You want your code to be the thing that stops a compromised credential or a runaway AI coding agent before it impacts production.

What You’ll Do

• Design, build, and own our kernel-mode enforcement drivers: file-system, process and thread creation, handle operations, and registry access.
• Block operations inline in the kernel rather than logging them after the fact.
• Build the userspace agent that installs and drives them.
• Own the kernel/user-mode enforcement boundary: kernel-side event capture, policy evaluation in user mode, and deny decisions pushed back into the driver as hash-keyed caches.
• Drive down enforce-mode latency on the operation hot path as we scale across large fleets.
• Extend enforcement into containers and isolation: Windows containers and Host Compute Service workloads, silo- and job-object-aware policy, and container identity on kernel events.
• Harden portability and stability across Windows builds so enforcement loads and behaves correctly on the versions customers actually run.
• Partner with the Linux and macOS enforcement engineers and the policy-backend team on the shared plane.
• Read requirements to find gaps and risks, propose simplifications, and explain tradeoffs to technical and non-technical stakeholders.
• Raise the engineering bar by taking end-to-end ownership from design through production.
• Mentor senior and mid-level engineers on Windows systems and kernel-driver craft.

Qualifications

• Deep Windows kernel internals knowledge: I/O manager, IRP flow, object manager, process and thread structures, memory management, Windows security model.
• Production kernel-mode driver development experience in C, C++, or Rust.
• Hands-on kernel-mode driver work for security enforcement.
• Driver signing and deployment reality: WHQL attestation, EV code signing, WDK and WDF/KMDF.
• Understanding of the Windows isolation model: job objects, silos, Windows containers, AppContainer.
• Kernel debugging and performance tooling experience: WinDbg, KD, live-kernel and crash-dump analysis.
• 8+ years in systems-level software engineering with real depth in Windows kernel development.
• Demonstrated AI-first development experience.
• A working grasp of systems design patterns and their tradeoffs at the kernel/user-mode boundary.
• Full-lifecycle experience, including product release, in an agile environment.
• A track record of technical leadership on complex, ambiguous initiatives that span teams.

Requirements

• Ability to adapt when the situation and the requirements shift.
• High standards for shipping reliable systems, especially where a kernel bug carries outsized risk.
• Experience with rigorous testing, sharp peer review, and resilient architecture.
• Judgment to balance speed against risk and decide from data.
• Commitment to shipping correct code, prioritizing correctness over speed.

Benefits

• Inclusive culture that values diversity.
• Supportive environment for employee well-being.