Lead Linux Kernel & eBPF Enforcement Engineer

BeyondTrust; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

BeyondTrust seeks a Staff Software Development Engineer to own the Linux kernel enforcement layer of the Identity Security Platform. You will implement in-kernel eBPF hooks and LSM logic, ensuring real-time policy decisions across fleets while maintaining compatibility with macOS and Windows enforcement surfaces.

You will drive end-to-end ownership from design through production, mentor engineers, and collaborate with cross-org teams on policy semantics and event schemas.

Qualifications

• Strong expertise in Linux kernel internals and eBPF enforcement.
• Proficient in systems programming with C and Rust.
• Experience with kernel-user space boundary across multiple kernels and distributions.

Responsibilities

• Design, build, and own eBPF programs and LSM hooks in kernel space.
• Manage kernel/userspace enforcement boundary and policy evaluation.
• Reduce syscall latency and optimize for large fleet deployments.
• Collaborate across platforms (macOS/Windows) and policy-backend teams.

Skills

Linux kernel

eBPF

Rust

C

Tools

perf

ftrace

bpftrace

libbpf

Job description

BeyondTrust seeks a Staff Software Development Engineer to own the Linux kernel enforcement layer of the Identity Security Platform. You will implement in-kernel eBPF hooks and LSM logic, ensuring real-time policy decisions across fleets while maintaining compatibility with macOS and Windows enforcement surfaces.

You will drive end-to-end ownership from design through production, mentor engineers, and collaborate with cross-org teams on policy semantics and event schemas.