Staff Software Engineer - Linux

Job Summary

As the Linux kernel authority for the runtime enforcement layer of the Identity Security Platform, the full-time Staff Software Engineer - Linux will design and implement eBPF programs, manage kernel/userspace enforcement boundaries, and drive performance enhancements across large fleets.

Key responsibilities

• Design, build, and own eBPF programs and BPF LSM hooks for synchronous policy enforcement in the Linux kernel
• Manage kernel-side event capture and policy evaluation in userspace, ensuring efficient deny decisions are pushed back into the kernel
• Extend enforcement capabilities into containers and namespaces while ensuring portability across kernel versions and distributions

Required qualifications

• Deep understanding of Linux kernel internals, including scheduling, memory management, and the LSM framework, with experience in C or Rust
• Hands-on experience with eBPF for security enforcement, including proficiency at the verifier level
• Knowledge of container runtime internals, such as namespaces and cgroups, and their interaction with kernel-level security
• 8+ years of experience in systems-level software engineering with a focus on Linux kernel development and eBPF
• Demonstrated experience with AI-driven development tools and practices in an agile environment