Senior Windows Kernel Engineer - Secure Endpoint Driver

CloudZero; United States; Remote; USD 170,000 - 230,000; Full time

Job summary

CloudZero is seeking an experienced Windows systems engineer to take a proof-of-concept driver and Go relay into a signed, installable product for enterprise Windows deployments. You will own the kernel-mode driver, user-mode service, signing, packaging, and fail-safe behavior to keep endpoints secure and reliable.

The role requires deep Windows systems experience, kernel-mode development, and expertise in code signing, EV certificates, and deployment automation.

Qualifications

• Shipped software running as a service, driver, or endpoint agent on Windows.
• Hands-on kernel-mode or low-level Windows development experience.
• Familiar with Windows networking internals and WFP or similar traffic interception.
• Proficient in C/C++ for driver side and Go or similar for user-mode.
• Experience with Windows code signing, EV certificates, and Attestation/WHQL.

Responsibilities

• Take the Windows agent from PoC to signed, installable product.
• Own the KMDF/WFP driver and the Go relay, keeping them in sync.
• Solve driver signing, Secure Boot, and code integrity challenges.
• Build installer, updater, and enterprise deployment story.
• Design for fail-open and ensure non-AI traffic never touches code.
• Manage local CA trust, TLS interception, and reversibility.
• Develop endpoint client in Electron/TypeScript and ensure parity with macOS.
• Mentor teammates through code reviews and design feedback.

Skills

Windows kernel

KMDF/WDM

C/C++

Go

WinDbg

Code signing

Networking internals

TLS interception

End-user security

Tools

MSIX

MSI

WiX

EV certificates

Job description

CloudZero is seeking an experienced Windows systems engineer to take a proof-of-concept driver and Go relay into a signed, installable product for enterprise Windows deployments. You will own the kernel-mode driver, user-mode service, signing, packaging, and fail-safe behavior to keep endpoints secure and reliable.

The role requires deep Windows systems experience, kernel-mode development, and expertise in code signing, EV certificates, and deployment automation.