Remote Senior Endpoint Engineer - Equity & Impact

Openkrill; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Equity

Healthcare coverage

Flexible PTO

Parental leave

Lifestyle stipend

Home office stipend

Job summary

Ent is seeking an Endpoint Engineer to own the endpoint agent across Windows, macOS, and Linux, covering collection, policy evaluation, enforcement, transport, and lifecycle.

You will design, implement, test, and roll out features end‑to‑end, manage agent packaging, updates, and uninstall, and ensure performance and stability on machines you cannot log into. Join a security platform focused on protecting organizations from risk in the AI era with a distributed, remote‑friendly team.

Qualifications

• 5+ years building production software in C/C++ or Swift, including work on native desktop or endpoint software.
• Working knowledge of operating system internals and system APIs on at least one of Windows, macOS, or Linux.
• Experience with software that runs unattended on machines you do not control: versioning, upgrades, backward compatibility, and failure recovery.
• Solid grasp of concurrency, memory management, and empirical performance measurement.
• Debugging discipline — you reproduce, instrument, and prove root cause instead of guessing at fixes.
• Comfort with build systems, cross‑platform CI/CD, and test automation (CMake or Bazel, GitHub Actions or equivalent), plus scripting in Python.
• Security‑conscious coding habits: input validation, privilege boundaries, and awareness of how endpoint software itself becomes attack surface.
• Clear communication and effective collaboration in a distributed, fast‑moving team.

Responsibilities

• Build and own components of Ent's single lightweight agent across Windows, macOS, or Linux; collection, enrichment, policy evaluation, enforcement, IPC, local storage, and cloud transport.
• Deliver features end to end: design, implementation, tests, telemetry, staged rollout, and post-release monitoring.
• Own agent lifecycle engineering: packaging and installers (MSI, PKG, DEB/RPM), enrollment, configuration delivery, safe staged self-update, rollback, and clean uninstall.
• Keep the agent fast and boring — enforce CPU, memory, disk, and network budgets, catch performance regressions in CI, and treat stability as non‑negotiable on machines you cannot log into.
• Implement offline and degraded-mode behavior: local queueing, backpressure, policy caching, retry semantics, and clock and connectivity edge cases.
• Build diagnostics, log collection, health reporting, and support tooling so field issues can be root-caused without attaching a debugger to a customer's laptop.
• Own test infrastructure for the agent: unit and integration tests, cross‑platform CI, OS‑version matrices, upgrade and downgrade paths, and soak and performance testing on real hardware.
• Integrate agent signals with backend services and the browser extension, and work with platform teams on API and schema evolution without breaking older agent versions.
• Handle escalations across the stack — failed installs, conflicts with other security agents, OS and kernel upgrades, crashes, and performance complaints.
• Contribute to code review, design review, documentation, and the on‑call rotation for agent health.

Skills

C/C++

Swift

OS internals

Unattended software

Concurrency

Memory management

Debugging

CI/CD

Python

Security

Communication

Job description

Ent is seeking an Endpoint Engineer to own the endpoint agent across Windows, macOS, and Linux, covering collection, policy evaluation, enforcement, transport, and lifecycle.

You will design, implement, test, and roll out features end‑to‑end, manage agent packaging, updates, and uninstall, and ensure performance and stability on machines you cannot log into. Join a security platform focused on protecting organizations from risk in the AI era with a distributed, remote‑friendly team.