Staff Software Development Engineer – Linux Endpoint

Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

The Role

As Staff Software Development Engineer, you'll be the Linux kernel authority for the runtime enforcement layer of our Identity Security Platform. These components decide, in-kernel, whether to permit or deny each action an identity or AI agent attempts on a Linux endpoint.

You'll set the technical direction for eBPF enforcement on Linux and own it end to end. That means hooks that make the right call in real time, across the fleet, without breaking legitimate workloads. Peer engineers own the macOS and Windows enforcement surfaces. You share one policy language, one event schema, and one userspace agent with them, but Linux kernel-space is yours.

You know this layer better than anyone. You want your code to be the thing that stops a compromised credential or a runaway AI coding agent before it impacts production.

What You’ll Do

• Design, build, and own our eBPF programs and BPF LSM hooks.
• Own the kernel/userspace enforcement boundary.
• Drive down enforce-mode latency on the syscall hot path.
• Extend enforcement into containers and namespaces.
• Harden portability across kernel versions and distributions.
• Partner with the macOS and Windows enforcement engineers.
• Read requirements to find gaps and risks.
• Raise the engineering bar and mentor engineers.

What You’ll Bring

This is a Linux specialist role, so the depth requirements are real:

• Deep Linux kernel internals knowledge.
• Hands-on eBPF for security enforcement.
• BTF and CO-RE knowledge.
• Container runtime internals understanding.