Staff/Principal Software Engineer-Windows Endpoint Agent

CloudZero
United States
Workplace: RemoteFull timeUSD 220,000 - 290,000 annuallyFunction: Software EngineeringSkills: ["Ownership","Code review","Mentorship","Design feedback"]

Own CloudZero’s Windows endpoint agent from lab prototype to a signed, installable, auto-updating product. You’ll implement and maintain a WFP callout kernel driver and a user-mode Go relay, handle code signing and Secure Boot/attestation, and deliver reliable installer/update/uninstall plus fail-open behavior so non-AI traffic never breaks customer connectivity. You’ll also help build the Electron/TypeScript endpoint client and mentor engineers.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
CloudZero
CloudZero
5 days ago

Staff/Principal Software Engineer-Windows Endpoint Agent

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Own CloudZero’s Windows endpoint agent from lab prototype to a signed, installable, auto-updating product. You’ll implement and maintain a WFP callout kernel driver and a user-mode Go relay, handle code signing and Secure Boot/attestation, and deliver reliable installer/update/uninstall plus fail-open behavior so non-AI traffic never breaks customer connectivity. You’ll also help build the Electron/TypeScript endpoint client and mentor engineers.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Software Engineering
Seniority: Mid level

Key Responsibilities

  • •Take the Windows agent from proof of concept to a signed, installable, auto-updating product for customer machines.
  • •Own the WFP callout driver (KMDF, C/C++) and the user-mode Go relay, keeping them aligned as the capture core evolves.
  • •Implement kernel driver signing and packaging requirements (EV certificate, attestation, Secure Boot) without weakening code integrity.
  • •Build the installer, update, and clean uninstall path (MSI/MSIX) and the enterprise deployment story.
  • •Design and implement fail-open behavior (non-AI traffic never touches the agent) and manage local CA trust/TLS interception safely and reversibly.

Pay and Benefits

Salary: USD 220,000 - 290,000 annually
Equity and Bonus:Equity

Key Requirements

  • •Deep Windows systems experience shipping endpoint software that runs as a service/driver/agent.
  • •Kernel-mode or low-level Windows development with KMDF/WDM and ability to debug (e.g., WinDbg).
  • •Knowledge of Windows networking internals, especially Windows Filtering Platform or comparable traffic interception.
  • •Proficiency with C/C++ for the driver and Go (or another systems language) for the user-mode relay; able to reason about unfamiliar code.
  • •Hands-on experience shipping signed kernel drivers (Authenticode/EV certificates) and working with Microsoft attestation/WHQL realities.
Skills:OwnershipCode reviewMentorshipDesign feedback
Tech Stack:WindowsWindows Filtering Platform (WFP)KMDFCC++GoElectronTypeScriptWinDbgEV certificatesAuthenticodeSecure BootMicrosoft attestationWHQLMSIMSIXWiXTLS interceptionTLSMITM proxies

Company Brief

CloudZero
CloudZero provides a cloud cost intelligence platform that gives engineering and finance teams real-time visibility and allocation of cloud spend to products, features, and customers, enabling cost optimization and improved unit economics for enterprises.
Industry: SaaS
Company Size: Medium (51 to 250 employees)
Growth: Scaleup
Funding: Series C
Headquarters: Boston, United States
Founded: 2016
Glassdoor
Glassdoor: 4.9
WebsiteLinkedInGlassdoor