Senior/Staff Software Development Engineer - macOS Endpoint

Role Description

As Staff Software Development Engineer, you'll be the macOS authority for the runtime enforcement layer of our Identity Security Platform. These components decide whether to permit or deny each action an identity or AI agent attempts on a macOS endpoint.

You'll set the technical direction for enforcement on macOS and own it end to end. That means:

• Hooks that make the right call in real time, across the fleet, without breaking legitimate workloads.
• Peer engineers own the Linux and Windows enforcement surfaces.
• You share one policy language, one event schema, and one userspace agent with them, but macOS is yours.

You know this layer better than anyone. You want your code to be the thing that stops a compromised credential or a runaway AI coding agent before it impacts production.

What You’ll Do

• Design, build, and own our Endpoint Security client: process execution, file, and signal events, plus synchronous authorization events.
• Block operations by returning a deny verdict before the event completes.
• Own the enforcement decision path: event capture from Endpoint Security, policy evaluation, and deny decisions applied within Apple's authorization deadline.
• Drive down enforce-mode latency on the authorization path as we scale across large fleets.
• Extend enforcement across network and content control: a Network Extension content filter for socket- and flow-level policy.
• Harden portability and stability across macOS versions and both Apple Silicon and Intel.
• Partner with the Linux and Windows enforcement engineers and the policy-backend team on the shared plane.
• Read requirements to find gaps and risks, propose simplifications, and explain tradeoffs to technical and non-technical stakeholders.
• Raise the engineering bar by taking end-to-end ownership from design through production.
• Mentor senior and mid-level engineers on macOS systems and Endpoint Security craft.

Qualifications

• Deep macOS system internals knowledge, including the Endpoint Security framework, System and Network Extensions, and more.
• Hands-on work with Endpoint Security for enforcement, especially on the synchronous authorization path.
• Understanding of the macOS deployment reality: System Extension activation, MDM-managed deployment, and more.
• Knowledge of the macOS isolation and security model.
• Experience with debugging and performance tooling: lldb, Instruments, dtrace, and more.
• 8+ years in systems-level software engineering, with depth in macOS system software.
• Demonstrated AI-first development experience.
• A working grasp of systems design patterns and their tradeoffs at the OS-enforcement boundary.
• Full-lifecycle experience in an agile environment.
• A track record of technical leadership on complex, ambiguous initiatives.

Who You Are

• You share successes and failures openly and work well with people.
• You adapt when the situation and requirements shift.
• You fix issues proactively and stay persistent through roadblocks.
• You hold a high bar and push your teams to ship reliable systems.
• You reach for AI tools to move faster and think more clearly.
• You feel the weight of enforcement code and prioritize correctness.