Staff/Principal Software Engineer – Windows Endpoint Agent

This is a fully remote position, open to applicants in United States.

📋 Description

• Transform the Windows agent from a proof of concept into a finalized, installable, and auto-updating Windows product.

• Take ownership of the WFP callout driver utilizing KMDF and C/C++.

• Manage the user-mode Go relay while ensuring synchronization with the shared capture core.

• Oversee production kernel-mode driver signing, including EV certificates, Microsoft attestation, and Secure Boot processes.

• Create the MSI or MSIX installer, establish an update path, implement a clean uninstall process, and develop the enterprise deployment strategy.

• Design fail-open behavior to ensure that non-AI traffic does not interact with the code and that failures do not compromise the endpoint.

• Safely, transparently, and reversibly manage local CA trust and TLS interception.

• Develop the endpoint client using Electron and TypeScript.

• Collaborate with the product team to enhance the Windows agent customer experience and achieve parity with macOS.

• Deliver code reviews, design insights, and direct mentorship.

⛳️ Requirements

• Extensive experience with Windows systems, particularly in shipping software that operates as a Windows service, driver, or endpoint agent.

• Background in kernel-mode or low-level Windows development using KMDF or WDM.

• Familiarity with the Windows Driver Kit.

• Proficient in debugging with WinDbg.

• Solid understanding of Windows networking internals and the Windows Filtering Platform or similar traffic interception methods.

• Strong skills in C or C++ for driver development.

• Competence in Go or another systems programming language for user-mode development.

• Ability to read and comprehend code in unfamiliar programming languages.

• Experience that spans from kernel drivers to desktop UIs, along with awareness of strengths and areas where the team may require support.

• Practical experience with Windows code signing, including Authenticode, EV certificates, Microsoft attestation, or WHQL.

• Proven history of deploying endpoint software to machines outside of one's direct control.

• Experience in designing for failure, performing cleanup, and applying the principle of least privilege.

• Good judgment concerning the appropriateness of kernel-level solutions.

• A successful track record of shipping software.

• Must be located in the United States; CloudZero can only hire residents of the US.

• Must be able to address questions regarding US visa/work sponsorship.

🏝️ Benefits

• Equity opportunities.

• Bonus potential.

• A collaborative and fast-paced work environment.

• Opportunity to work with cutting-edge technology.

• Growth prospects within a scaling company.