Staff Software Engineer

About This Role

• Senior Linux Systems Engineer – Security & Identity Role Overview We are seeking a S enior Linux systems engineer with over 10 years of specialized experience in low-level C/C++ systems programming, cryptographic network security, and enterprise identity integration.
• In this role, you will architect, build, and secure core Linux infrastructure components.
• You will be responsible for designing high-throughput Linux daemons, authoring custom PAM modules, automating X.509 certificate lifecycles, and hardening enterprise software against complex, system-level vulnerabilities.
• Key Responsibilities Low-Level Systems Development : Architect and build high-performance, fault-tolerant Linux daemons using modern C/C++ and POSIX APIs.
• Identity & Authentication Engineering: Design and implement custom Pluggable Authentication Modules (PAM) and integrate systems seamlessly with enterprise identity providers (Active Directory, LDAP, Kerberos, SSSD).
• Cryptography & PKI Management: Implement robust end-to-end transport and storage security using OpenSSL/WolfSSL APIs; manage and automate X.509 PKI certificate lifecycles, mTLS configurations, and cryptographic operations.
• System Hardening & Security: Enforce system safety across Linux environments using granular security policies (Seccomp, SELinux/AppArmor) and secure coding standards (constant-time cryptographic execution, memory safety).
• Network Analysis & Debugging: Diagnose, trace, and resolve complex network- and protocol-level bottlenecks or security flaws across TCP/IP stacks using advanced tools.
• Required Qualifications & Technical Expertise Experience 10+ years of hands-on experience in Linux systems programming, enterprise security engineering, or low-level software architecture.
• Technical Domain Capabilities Languages & Toolchains: Proficient in C, C++, POSIX APIs, CMake, Make, GCC/Clang, GDB, and advanced Shell Scripting (Bash).
• Linux Systems Programming: Deep knowledge of IPC (Unix Sockets, Shared Memory, Message Queues), Concurrency/Threading (pthreads), Asynchronous Event Loops (epoll, io_uring), Custom Daemon development, and manual Memory Management.
• Cryptography & Security: Direct API-level experience with OpenSSL/WolfSSL, TLS 1.2/1.3, mTLS, X.509 PKI, PEM/DER encoding, symmetric/asymmetric ciphers, HMAC, and constant-time cryptographic programming.
• Authentication & Identity Integration: Demonstrated experience with PAM module development, Active Directory (AD), LDAP, SSSD, Kerberos/GSSAPI, and enterprise OAuth2/OIDC protocols.
• Networking & Linux Hardening: Expert understanding of TCP/IP, socket-level programming, Seccomp sandboxing, AppArmor/SELinux mandatory access control, and network tracing tools (tcpdump, Wireshark).
• AI-Assisted Engineering Practice: AI Collaboration: Demonstrated expertise leveraging advanced AI coding tools (e.g., Cursor, Claude) as force-multiplier co-workers to accelerate low-level engineering workflows.
• Spec-Driven Methodology: Strong foundation in AI spec-driven development practices (e.g., Plan/BMAD modes) to design, map, and implement full SDLC phases.
• AI Code Review & Governance: Ability to critically inspect, profile, and audit AI-generated code for zero-trust security, memory safety, architectural integrity, and performance bottlenecks.
• We will also consider qualified applicants with arrest and conviction records consistent with local law.
• We will also consider qualified applicants with arrest and conviction records consistent with local law.
• If you are located outside USA, please be sure to fill out a home address as this will be used for future correspondence.