Staff Software Development Engineer – Windows Endpoint

About the role

BeyondTrust is seeking a senior engineer to lead the Windows kernel enforcement layer of its Identity Security Platform. You will own the design, implementation, and operation of kernel‑mode drivers that enforce security policies in real time on Windows endpoints.

Key responsibilities

• Design, develop, and maintain kernel‑mode enforcement drivers for file‑system, process, thread, handle, and registry operations.
• Implement the kernel/user‑mode enforcement boundary, including event capture, policy evaluation, and inline deny decisions.
• Optimize latency and scalability of enforcement across large fleets, handling process churn and container workloads.
• Ensure driver portability and stability across Windows releases, addressing PatchGuard, Driver Verifier, HVCI, and WHQL signing requirements.
• Collaborate with macOS and Linux enforcement teams on shared policy language, event schema, and Rust agents.

Required profile

• 8+ years of systems‑level software engineering with deep expertise in Windows kernel internals.
• Proven experience shipping production kernel‑mode drivers (e.g., file‑system minifilters) in C, C++ or Rust.
• Hands‑on knowledge of driver signing, WHQL attestation, EV code signing, and large‑scale deployment.
• Experience with Windows isolation models (job objects, silos, containers, AppContainer).
• Strong debugging and performance analysis skills using WinDbg, KD, ETW, and Driver Verifier.

Required skills

• Windows kernel development
• C, C++, Rust
• WDK, WDF/KMDF, driver signing (WHQL, EV)
• WinDbg, KD, ETW, Driver Verifier
• Container and isolation technologies on Windows