Senior Linux Engineer, Privileged Access

Responsibilities

• Design, develop, and maintain Linux endpoint privilege management capabilities across Rust, C, and .NET components.
• Build kernel-facing agent functionality using fanotify, the proc filesystem, namespaces, capabilities, and process identity interfaces.
• Develop and maintain native PAM modules and Linux privilege-elevation workflows.
• Build long-running privileged Linux services using Rust, Tokio, MQTT, TLS, and asynchronous programming patterns.
• Develop Linux orchestration and session-management capabilities in .NET 8, including process authentication, access controls, ephemeral accounts, and session monitoring.
• Diagnose Linux execution and security issues involving blocked processes, authentication races, permissions, SELinux, AppArmor, and system services.
• Design privilege-enforcement mechanisms based on least privilege, process trust, and protection against TOCTOU and authorization race conditions.
• Build and maintain systemd services, RPM and DEB packages, installation workflows, service hardening, and operational diagnostics.
• Collaborate with PAM, endpoint, QA, and platform engineers on architecture, testing, cross-platform functionality, and production troubleshooting.
• Use AI-assisted development tools such as Claude, ChatGPT, and GitHub Copilot for research, debugging, development, testing, and documentation.

Requirements

• 7+ years of professional software or systems engineering experience with significant hands-on Linux systems programming experience.
• Deep understanding of Linux processes, security concepts, the proc filesystem, user and group IDs, capabilities, namespaces, and process execution.
• Strong C programming experience, including native Linux development, memory management, GCC, Make-based workflows, and defensive error handling.
• Experience developing or integrating with Linux PAM and PAM configuration.
• Strong Rust experience with ownership, concurrency, asynchronous development, and long-running service or daemon design.
• Experience with Tokio or similar asynchronous Rust frameworks.
• Working proficiency with C# and .NET in Linux environments.
• Experience developing security-sensitive software involving authentication, authorization, privilege elevation, process trust, or least-privilege controls.
• Understanding of Linux service management and operations, including systemd, journalctl, SELinux and/or AppArmor, and RPM/DEB packaging.
• Experience troubleshooting low-level Linux behavior using logs, process inspection, tracing, and reproducible test tools.
• Ability to read Linux kernel and subsystem documentation and translate system behavior into secure production implementations.
• Ability and willingness to use AI-assisted tools for systems programming, debugging, technical analysis, testing, and documentation.
• Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
• Preferred: experience with MQTT or other event-driven messaging technologies.
• Preferred: experience with Linux desktop session technologies such as X11, Wayland, GDM, and D-Bus.
• Preferred: familiarity with TLS, PKI, code signing, and certificate-based process or plugin authentication.
• Preferred: experience supporting RHEL and Ubuntu and understanding SELinux/AppArmor differences.
• Preferred: experience with endpoint privilege management, privileged access management, or endpoint security products.
• Preferred: familiarity with Avalonia or another cross-platform Linux desktop UI framework.
• Preferred: experience building Linux software for x86 and ARM architectures, including packaging and signing pipelines.
• Preferred: familiarity with endpoint security architectures on Windows or macOS and authorization models including allow, deny, approval, and just-in-time elevation workflows.

Benefits

• 100% remote position, with hybrid scheduling available for candidates in the Chicago, Illinois or El Dorado Hills, California metro areas.
• Medical, dental, and vision insurance, including domestic partnerships.
• Employer-paid life insurance and supplemental life insurance options.
• Voluntary short- and long-term disability insurance.
• Roth or traditional 401(k).
• Generous paid time off, including paid bereavement and jury duty leave.
• Above-market annual bonuses.