Endpoint Engineer

Ent

2d • Hybrid

About The Position

We are seeking an Endpoint Engineer to be part of the team that owns the endpoint agent every Ent capability ships on: collection, policy evaluation, enforcement, transport, and the lifecycle machinery around them. This role is measured on the things customers only notice when they break — installs, updates, offline behavior, and resource footprint on machines you cannot log into. Every other endpoint capability depends on getting it right.

Requirements

• 5+ years building production software in C/C++ or Swift, including work on native desktop or endpoint software.
• Working knowledge of operating system internals and system APIs on at least one of Windows, macOS, or Linux.
• Experience with software that runs unattended on machines you do not control: versioning, upgrades, backward compatibility, and failure recovery.
• Solid grasp of concurrency, memory management, and empirical performance measurement.
• Debugging discipline — you reproduce, instrument, and prove root cause instead of guessing at fixes.
• Comfort with build systems, cross-platform CI/CD, and test automation (CMake or Bazel, GitHub Actions or equivalent), plus scripting in Python.
• Security-conscious coding habits: input validation, privilege boundaries, and awareness of how endpoint software itself becomes attack surface.
• Clear communication and effective collaboration in a distributed, fast-moving team.

Nice To Haves

• Prior endpoint security experience — EDR, DLP, EPP, MDM, or insider risk — or work on systems-monitoring agents.
• Exposure to kernel extensions and drivers, eBPF, ETW, or the macOS Endpoint Security Framework.
• Enterprise deployment realities: Intune, Jamf, SCCM, Ansible, and MDM-driven configuration management.
• Code signing, Apple notarization, or driver attestation pipelines.

Responsibilities

• Build and own components of Ent's single lightweight agent across Windows, macOS, or Linux; collection, enrichment, policy evaluation, enforcement, IPC, local storage, and cloud transport.
• Deliver features end to end: design, implementation, tests, telemetry, staged rollout, and post-release monitoring.
• Own agent lifecycle engineering: packaging and installers (MSI, PKG, DEB/RPM), enrollment, configuration delivery, safe staged self-update, rollback, and clean uninstall.
• Keep the agent fast and boring — enforce CPU, memory, disk, and network budgets, catch performance regressions in CI, and treat stability as non-negotiable on machines you cannot log into.
• Implement offline and degraded-mode behavior: local queueing, backpressure, policy caching, retry semantics, and clock and connectivity edge cases.
• Apply secure engineering fundamentals inside a privileged process: least privilege, signed and verified updates, secrets handling, and safe parsing of untrusted input.
• Build diagnostics, log collection, health reporting, and support tooling so field issues can be root-caused without attaching a debugger to a customer's laptop.
• Own test infrastructure for the agent: unit and integration tests, cross-platform CI, OS-version matrices, upgrade and downgrade paths, and soak and performance testing on real hardware.
• Integrate agent signals with backend services and the browser extension, and work with platform teams on API and schema evolution without breaking older agent versions.
• Handle escalations across the stack — failed installs, conflicts with other security agents, OS and kernel upgrades, crashes, and performance complaints.
• Contribute to code review, design review, documentation, and the on-call rotation for agent health.

Benefits

• Distributed workplace. While we have positions we hire for in our SF office, we also hire remotely across North America.
• Every teammate gets meaningful equity on top of their salary.
• 90% of your medical, dental, and vision is paid by Ent. We also cover 75% for your dependents.
• Flexible PTO lets you recharge, travel, or just take a breather.
• 12 weeks of fully paid maternity leave (birth, adoption, or foster) and 8 weeks fully paid paternity leave.
• A $100 monthly lifestyle account to spend on what keeps you healthy and happy — fitness, wellness, learning, and more.
• A $500 home office stipend when you join as a remote employee.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed