Build Windows endpoint drivers that enforce security inline, combining kernel internals, performance engineering, and production stability expertise.BeyondTrust seeks a Staff Software Development Engineer to own Windows endpoint enforcement within its Identity Security Platform. You will design kernel-mode components that evaluate file, process, thread, handle, and registry activity. The position spans driver development, userspace policy evaluation, and fleet-scale reliability.Key Responsibilities:
Implement inline deny decisions inside Windows kernel enforcement driversManage kernel event capture and hash-keyed enforcement cachesReduce latency during heavy process churn across large fleetsHarden drivers across Windows builds, PatchGuard, HVCI,
and verifier requirementsMentor engineers in Windows systems and kernel-driver developmentRequirements:
Eight-plus years developing systems-level softwareShipped file-system minifilters or comparable callback-based security driversStrong understanding of IRQL, synchronization, reentrancy, and secure buffersExperience with Windows isolation, containers, AppContainer, silos, and job objectsFull-lifecycle product release and technical leadership experienceUse Windows driver development, kernel debugging, and performance judgment to deliver reliable endpoint enforcement at scale.