Beyondtrust

Staff Software Development Engineer - Windows Endpoint

Remote Canada | Remote United States · Staff+

Sponsorship not specifiedDetected 18 hours ago

C++Code ReviewLinuxLeadership

About the role

As Staff Software Development Engineer, you'll be the Windows kernel authority for the runtime enforcement layer of our Identity Security Platform.
These components decide, in-kernel, whether to permit or deny each action an identity or AI agent attempts on a Windows endpoint.
That means hooks that make the right call in real time, across the fleet, without breaking legitimate workloads.

Design, build, and own our kernel-mode enforcement drivers: file-system, process and thread creation, handle operations, and registry access.
You'll block operations inline in the kernel rather than logging them after the fact, and you'll build the userspace agent that installs and drives them.
Own the kernel/user-mode enforcement boundary: kernel-side event capture, policy evaluation in user mode, and deny decisions pushed back into the driver as hash-keyed caches so subsequent hits block inline.
Drive down enforce-mode latency on the operation hot path as we scale across large fleets. That means process enrichment, image-hash caching and eviction under heavy process-churn, and process-ancestry resolution across PPID spoofing.
Partner with the Linux and macOS enforcement engineers and the policy-backend team on the shared plane: policy semantics, cross-stack conformance, event schema, the common Rust agent. You'll represent Windows in cross-org architecture reviews.
Raise the engineering bar. You'll take end-to-end ownership from design through production, and you'll carry extra weight where a kernel bug means a wrong security decision or a bugcheck across the fleet, not just a crash of one process.

You've shipped a file-system minifilter or comparable callback-based driver, and you can reason about IRQL, synchronization, safe user-buffer access, and reentrancy in the kernel.
You know how to keep a driver off the crash path when a dependency misbehaves.
You share successes and failures openly, and you work well with people.
You know systems software best practices, from rigorous testing to sharp peer review to architecture that survives contact with production.
8+ years in systems-level software engineering, with real depth in Windows kernel development.
That matters most in correctness- and security-critical kernel code, where you have to know exactly when to stop and verify by hand.
A track record of technical leadership on complex, ambiguous initiatives that span teams.

BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.
BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.
Learn more at www.beyondtrust.com.
BeyondTrust is the global identity security leader protecting Paths to Privilege™.
Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.
BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies.
We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.
Harden portability and stability across Windows builds so enforcement loads and behaves correctly on the versions customers actually run.

This listing is sourced directly from Beyondtrust's careers page and normalized into a canonical job model.