Software Engineer, Windows Agent

Kandji•Miami, FL

48d

About The Position

Iru is the AI-powered security & IT platform used by the world's fastest-growing companies to secure their users, apps, and devices. Built for the AI era, Iru unifies identity & access, endpoint security & management, and compliance automation-collapsing the stack and giving IT & security time and control back. Iru is backed by some of the smartest investors in tech-General Catalyst, Tiger Global, Felicis, Greycroft, and First Round Capital. In July 2024, Iru raised $100 million from General Catalyst, valuing the company at $850 million. Customers include Notion, Cursor, Lovable, Replit, and Mercor, and Iru partners with industry leaders such as ServiceNow and AWS. Iru was named to Forbes' America's Best Startup Employers 2025 list for employee engagement and satisfaction. We're looking for an experienced Windows endpoint developer with deep knowledge of the Windows API, system internals, device management, and security. As a Software Engineer at Iru, you'll help design, build, and evolve our proprietary Windows agent - the software responsible for secure, scalable endpoint management across modern enterprise environments. You'll work closely with cross-platform engineers and product teams to deliver performant, reliable, and secure solutions that extend Iru's reach across Windows ecosystems.

Requirements

Languages: Proficiency in Rust, C, and C++ - with an ability to move between languages as needed for low-level system integration.
Rust FFI: Experience interfacing Rust with native Windows APIs or C/C++ libraries using Foreign Function Interfaces.
Windows API (Win32 & COM): Deep understanding of core Windows system APIs, interprocess communication mechanisms, and COM-based architecture.
Windows Internals: Familiarity with process management, memory handling, thread scheduling, I/O subsystems, and registry operations.
Windows Services: Experience building and maintaining long-running background processes or daemons for enterprise systems.
Inter-Process Communication (IPC): Knowledge of named pipes, shared memory, sockets, and message-passing architectures for robust cross-process communication.
Software Plugin Architecture: Ability to design modular systems that support extensibility and dynamic component loading.
Software Deployment Strategies: Experience designing and managing upgrade-safe, automated deployment and update mechanisms.
Windows Installer (WiX MSI, Bootstrapper): Hands-on experience packaging, installing, and updating Windows applications with custom actions or bootstrap logic.
Public Key Infrastructure (PKI): Understanding of certificate chains, signing, and validation used in secure communications and code signing.
X.509 Certificate Management: Experience with issuing, renewing, and validating digital certificates within enterprise systems.
Cryptographic Key Management: Knowledge of key generation, storage, and signing using hardware- or software-based cryptographic providers.
TPM Architecture: Understanding of Trusted Platform Module capabilities for hardware-backed security and attestation.
Automation and Scripting: Proficiency in PowerShell or batch scripting for diagnostics, deployment, or system configuration.

Nice To Haves

Kernel Driver Development: Experience writing or debugging kernel-mode drivers, filter drivers, or working with the Windows Driver Framework (WDF).
UI Development with WinUI 3: Familiarity with building native Windows UIs using modern frameworks like WinUI and Windows App SDK.
UI Design Patterns (MVVM): Understanding of Model-View-ViewModel and other architectural patterns for clean separation of concerns in desktop applications.
MDM Protocol: Experience implementing or interacting with Mobile Device Management (MDM) protocols for Windows device enrollment, configuration, and compliance.
Windows Security: Understanding of access control models (ACLs, SDDL), encryption and data protection (DPAPI), and secure credential handling.
Cross-Platform Agent Development: Exposure to multi-OS agent design (macOS, Linux, Windows) for consistent policy enforcement and data collection.
Security or Endpoint Management Experience: Background in developing or operating large-scale endpoint security or device management platforms.
Performance Profiling: Familiarity with profiling tools and techniques for diagnosing low-level system performance issues.

Responsibilities

Develop and maintain production-grade code for the Windows agent and supporting tools.
Design and implement features that operate close to the OS, leveraging Windows APIs and system internals.
Debug, optimize, and secure system-level code in complex enterprise environments.
Collaborate with engineers across macOS and Windows to ensure consistency and shared architecture.
Research, prototype, and ship new functionality that enhances endpoint visibility, security, and manageability.
Participate in Agile development practices, CI/CD workflows, and rigorous code review processes.
Drive software quality by writing modular, testable, and maintainable code.