Staff Windows Kernel Enforcement Architect

BeyondTrust, Inc.; United States; On-site; USD 150,000 - 210,000; Full time

Job summary

BeyondTrust is seeking a Staff Software Development Engineer to lead the Windows kernel enforcement layer for our Identity Security Platform. You will own in-kernel decisions, set direction for kernel-mode enforcement, and drive performance across large fleets, with peers owning macOS and Linux surfaces.

You will ensure safety for compromised credentials and AI-driven workflows. You will collaborate with Linux and macOS teams, mentor engineers, and push for robust, auditable security that scales

Qualifications

• 8+ years in systems-level software with Windows kernel experience.
• Shipped kernel-mode drivers or minifilters with performance considerations.
• Experience with AI-assisted development and large-scale security platforms.
• Proven leadership across cross-team initiatives.

Responsibilities

• Design, build, and own kernel-mode enforcement drivers for Windows.
• Own kernel/user-mode enforcement boundary and policy evaluation.
• Reduce enforce-mode latency across large fleets.
• Extend enforcement into Windows containers and Host Compute Service workloads.
• Ensure stability across Windows builds, WHQL attestation, and signings.
• Collaborate with Linux/macOS teams on shared policy plane.
• Review requirements, propose simplifications, and explain tradeoffs.
• Mentor senior and mid-level engineers on Windows kernel-driver craft.

Skills

Windows kernel internals

Kernel-mode driver development

C/C++

Rust

System-level design

AI-assisted development

Kernel debugging

Performance optimization

Agile/product release

Mentorship

Tools

WDK

WDF/KMDF

WinDbg

ETW

Driver Verifier

Job description

BeyondTrust is seeking a Staff Software Development Engineer to lead the Windows kernel enforcement layer for our Identity Security Platform. You will own in-kernel decisions, set direction for kernel-mode enforcement, and drive performance across large fleets, with peers owning macOS and Linux surfaces.

You will ensure safety for compromised credentials and AI-driven workflows. You will collaborate with Linux and macOS teams, mentor engineers, and push for robust, auditable security that scales