Windows Endpoint Engineer: Kernel Driver & Secure Deployment

CloudZero; Philippines; Remote; PHP 900,000 - 1,700,000; Full time

Job summary

CloudZero is seeking a Windows systems engineer to own the kernel-mode driver and user-mode relay on Windows. You will sign, package, and ship an end-to-end endpoint agent that safely intercepts traffic while maintaining system stability and privacy.

You will lead kernel-level development, drive signing, and implement enterprise deployment strategies. The role spans from driver code to a desktop UI, with emphasis on reliability and fail-safe design.

Qualifications

• Shipped software that runs as a Windows service, driver, or endpoint agent.
• Experience with kernel-mode or low-level Windows development (KMDF/WDM).
• Proficiency in C or C++ for driver side and Go or another systems language for user-mode.
• Familiarity with Windows networking internals and Windows Filtering Platform.
• Experience with Windows code signing and signed kernel drivers (Authenticode, EV certificates).

Responsibilities

• Take the Windows agent from PoC to a signed, installable product.
• Own the KMDF/ C/C++ driver and the Go relay, keeping them in sync.
• Solve driver signing, attestation, Secure Boot without compromising code integrity.
• Build/installers, updates, and enterprise deployment flows (MSI/MSIX).
• Design for fail-open so non-AI traffic remains unaffected.
• Manage TLS interception and certificate trust, ensuring reversibility.
• Develop endpoint client in Electron/TypeScript and align with macOS parity.
• Mentor peers through code reviews and design feedback.

Skills

Windows kernel development

C/C++

Go

TypeScript

WinDbg

KMDF/WDM

Code signing

TLS interception

Debugging

End user security mindset

Tools

WinDbg

MSIX/MSI/WiX packaging

EV certificates

Job description

CloudZero is seeking a Windows systems engineer to own the kernel-mode driver and user-mode relay on Windows. You will sign, package, and ship an end-to-end endpoint agent that safely intercepts traffic while maintaining system stability and privacy.

You will lead kernel-level development, drive signing, and implement enterprise deployment strategies. The role spans from driver code to a desktop UI, with emphasis on reliability and fail-safe design.