Senior Software Engineer – Windows EPM

Senior Software Engineer – Windows EPM

About SailPoint: 

SailPoint is the leader in identity security for the cloud enterprise. Our identity security solutions secure and enable thousands of companies worldwide, giving our customers unmatched visibility into the entirety of their digital workforce, ensuring workers have the right access to do their job – no more, no less. 

Built on a foundation of AI and ML, our Identity Security Cloud Platform, Atlas delivers the right level of access to the right identities and resources at the right time—matching the scale, velocity, and changing needs of today’s cloud-oriented, modern enterprise. 

About the team: 

You’ll be joining the newly formed Privileged Endpoint team, expanding the Windows Endpoint Privilege Management (EPM) product. Your focus will be adding user and kernel mode components that detect and respond to Windows processes and privilege escalation use cases. You’ll be working closely with architects and product management on the design and architecture of the product. Occasionally, you’ll get to work on other areas of the EPM product too. 

The team is fully remote and predominantly UK-based. As a small team, you will be a key contributor. 

The role:  

In a typical day you’ll be working on designing and implementing user and kernel mode product components implemented in C/C++, for detection and prevention of processes being run with elevated privileges. Some components will also be written in Rust. 

You’ll have the opportunity to contribute to the choice of tools and technology we use, to produce relevant product components.  

In 90 days, you’d be on-boarded and landing work to start implementing the Windows EPM solution. 

In 6 months, you’d be comfortable with the design and implementation of the client, as well as collaborating closely with the Windows EPM tech lead to own development of parts of the kernel/user mode components. 

In 1 year, you’d help release the product and take on larger features to help grow its functionality. 

Responsibilities: 

• Deliver efficient, maintainable, and robust features to implement the product design. 

• Assist with the design and system architecture of a new Windows EPM product. 

• Collaborate with the wider EPM team to integrate Windows EPM with the EPM backend and other SailPoint products. 

• Help implement features on the EPM cloud-based microservices and macOS EPM Client, where needed. 

• Collaborate with peers on designs, code reviews, and testing, and help promote these practices. 

• Help design a testing architecture for the kernel driver, aiming for unit and end-to-end tests to ensure code quality. 

Experience/requirements: 

Required: 

• Collaborative, approachable and articulate 

• Strong experience with C/C++ 

• Experience developing robust kernel-mode drivers on Windows, with detection and handling of running processes a strong plus 

• Understanding of fundamental security concepts, particularly Windows security, such as Windows access tokens 

• Knowledge of communication between kernel-mode drivers and user-mode programs, such as IOCTLs 

• Experience with an appropriate language for a Windows user-mode component 

• CI/CD pipelines such as Jenkins 

• BSc in Computer Science or similar or equivalent work experience 

Preferred: 

• Experience in a GUI framework such as WinUI 3/Qt/WPF 

• Experience with Rust/Golang 

• Database technologies such as Amazon DynamoDB 

• Containerisation & container orchestration such as Docker 

• Microservices & SaaS 

• 5+ years of experience 

SailPoint is an equal opportunity employer and we welcome everyone to our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status. 

SailPoint is an equal opportunity employer and we welcome everyone to our team.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.