Staff Software Development Engineer - Windows Endpoint

This is a Windows specialist role, so the depth requirements are real:

• Deep Windows kernel internals - the I/O manager and IRP flow, the object manager, process and thread structures, memory management, the Windows security model (tokens, SIDs, ACLs) - backed by production kernel-mode driver development in C, C++, or Rust.
• Hands-on kernel-mode driver work for security enforcement. You've shipped a file-system minifilter or comparable callback-based driver, and you can reason about IRQL, synchronization, safe user-buffer access, and reentrancy in the kernel. You know how to keep a driver off the crash path when a dependency misbehaves.
• Driver signing and deployment reality: WHQL attestation, EV code signing, the WDK and WDF/KMDF, and the operational cost of shipping kernel code to a large install base.
• The Windows isolation model - job objects, silos, Windows containers, AppContainer - and how it intersects with kernel-level security tooling.
• Kernel debugging and performance tooling: WinDbg and KD, live-kernel and crash-dump analysis, ETW, Driver Verifier, and the checked-build workflow.
• 8+ years in systems-level software engineering, with real depth in Windows kernel development.
• Demonstrated AI-first development. We build this platform through agentic tooling. AI-driven design exploration, code generation, adversarial plan review, and automated pre-merge quality gates are how work ships here, not a side experiment. You use Claude Code or a comparable tool as a core part of your daily workflow, and you can speak concretely to how it raises both your velocity and your rigor. That matters most in correctness- and security-critical kernel code, where you have to know exactly when to stop and verify by hand.
• A working grasp of systems design patterns and their tradeoffs at the kernel/user-mode boundary.
• Full-lifecycle experience, including product release, in an agile environment.
• A track record of technical leadership on complex, ambiguous initiatives that span teams.

• You share successes and failures openly, and you work well with people. You adapt when the situation and the requirements shift. You fix issues before anyone assigns them to you, and you stay persistent through roadblocks, pulling in others when you need to.
• You hold a high bar and push your teams to ship reliable systems, especially where a kernel bug carries outsized risk. You know systems software best practices, from rigorous testing to sharp peer review to architecture that survives contact with production.
• You reach for AI tools to move faster and think more clearly, and you keep the judgment to slow down and verify by hand when the code demands it. You weigh speed against risk and decide from data.
• You feel the weight of enforcement code. You'd rather ship a correct block a day late than a wrong one now, and you choose your failure modes - fail-open or fail-closed - on purpose instead of by accident.

Diversity.

Inclusion.

They’re more than just words for us.

They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected.

We take care of our employees so they can take care of our customers.

Customers who come from all walks of life just like us.

We hire incredible people from diverse backgrounds because when we are different together, we are stronger together.

BeyondTrust is the global identity security leader protecting Paths to Privilege™.

Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders.

BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies.

We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners.

Learn more at www.beyondtrust.com .