As the Linux kernel authority for the runtime enforcement layer of the Identity Security Platform, the full-time Staff Software Engineer - Linux will design and implement eBPF programs, manage kernel/userspace enforcement boundaries, and drive performance enhancements across large fleets. Key responsibilities Design, build, and own eBPF programs and BPF LSM hooks for synchronous policy enforcement in the Linux kernel Manage kernel-side event capture and policy evaluation in userspace, ensuring efficient deny decisions are pushed back into the kernel Extend enforcement capabilities into containers and namespaces while ensuring portability across kernel versions and distributions Required qualifications Deep understanding of Linux kernel internals, including scheduling, memory management, and the LSM framework, with experience in C or Rust Hands-on experience with eBPF for security enforcement, including proficiency at the verifier level Knowledge of container runtime internals, such as namespaces and cgroups, and their interaction with kernel-level security 8+ years of experience in systems-level software engineering with a focus on Linux kernel development and eBPF Demonstrated experience with AI-driven development tools and practices in an agile environment