Latest AI JobsBrowse Jobs
CloudZero logo

Staff/Principal Software Engineer-Windows Endpoint Agent

CloudZeroRemoteEngineering
Apply on company site
Salary
$220K - $290K USD
Job type
Full-time
Work mode
Remote
Posted
31 Aug 2026
Status
Open · checked 7d ago

About this role

This remote Staff or Principal Software Engineer position at CloudZero involves taking the Windows AI cost intelligence endpoint agent from a proof of concept to a fully realized enterprise product. This role is ideal for an experienced systems engineer who excels at low-level Windows development, kernel drivers, and resilient endpoint architecture.

Role Overview

CloudZero is seeking a senior technical leader to own the Windows endpoint agent, expanding the company's AI cost intelligence platform onto the primary operating system used by enterprise customers. Working from a functional lab prototype using a Windows Filtering Platform callout driver and a Go user-mode relay, the chosen candidate will take charge of turning this solution into a signed, robust, auto-updating offering. Responsibilities span the entire stack, from the kernel-mode driver and user-mode service to deployment pipelines and fail-open guarantees that ensure customer network stability.

Key Responsibilities

Advance the Windows endpoint agent from an experimental prototype into a signed, installable product capable of auto-updating across customer machines.
Oversee the Windows Filtering Platform callout driver written in C or C++ alongside the user-mode Go relay, maintaining synchronization as both evolve.
Handle production kernel-mode driver signing, utilizing EV certificates, Microsoft attestation, and Secure Boot workflows without compromising system integrity.
Construct seamless MSI or MSIX installer, update, and clean uninstall paths designed for enterprise distribution.
Architect resilient fail-open behaviors guaranteeing that non-AI traffic bypasses agent code entirely and that driver failures never disrupt endpoint connectivity.
Administer local Certificate Authority trust and TLS interception securely, transparently, and reversibly.
Develop the endpoint client user interface using Electron and TypeScript in collaboration with product teams to achieve parity with the macOS agent.
Elevate engineering standards across the organization by performing code reviews, offering design feedback, and mentoring colleagues.

Requirements

Extensive background in low-level Windows systems development, including shipping software functioning as a service, driver, or endpoint agent.
Hands-on experience with kernel-mode development utilizing KMDF, WDM, the Windows Driver Kit, and WinDbg debugging utilities.
Solid understanding of Windows networking internals, traffic interception, and the Windows Filtering Platform.
Practical coding proficiency in C or C++ for driver components and Go or a comparable systems language for user-mode elements.
Demonstrated capability with Windows code signing realities, Authenticode, EV certificates, and WHQL or Microsoft attestation processes.
Proven history of deploying endpoint software to external machines with a strong focus on defensive design, cleanup procedures, and least privilege principles.

Nice to Have

Background in developing enterprise-scale endpoint security, data loss prevention, EDR, or network monitoring agents.
Familiarity with TLS interception, Man-in-the-Middle proxies, or certificate trust management.
Experience packaging applications via MSIX, MSI, WiX, or customized auto-update frameworks.
Knowledge of enterprise deployment toolsets including Intune, Group Policy, or MDM.
Multi-platform endpoint engineering experience covering both Windows and macOS.
Practical usage of AI coding tools alongside a clear perspective on their workflows and limitations.

Skills and Tools

C
C++
Go
TypeScript
Electron
KMDF and WDM
Windows Filtering Platform
WinDbg
Windows Driver Kit

Salary and Benefits

Annual base salary ranging from $220,000 to $290,000 USD paid annually.

About the Company

CloudZero functions as an AI ROI company, supplying a financial control plane enabling finance, IT, and engineering teams to trace AI spending back to concrete business outcomes. The enterprise platform processes billions of billing events and serves prominent industry clients such as Coinbase, DoorDash, Duolingo, and Shutterstock. Backed by major venture capital firms with over $119 million raised, CloudZero operates in a collaborative and dynamic environment focused on solving intricate cloud challenges.

How to Apply

Interested candidates should submit their application directly on the official CloudZero careers page.

Skills and tech stack

TypeScriptC++

Questions candidates ask

What is the salary range for the Staff/Principal Software Engineer role?

The annual salary for this position ranges from $220,000 to $290,000 USD.

Is this position remote?

Yes, this is a remote employment opportunity.

What programming languages are required for the driver and user-mode components?

C or C++ is required for the driver side, while Go or another systems language is needed for the user-mode side. TypeScript and Electron are also used for the client interface.

What core networking technology does the Windows agent use?

The Windows agent utilizes a Windows Filtering Platform (WFP) callout driver to redirect AI provider traffic to a user-mode relay.

Where should I submit my job application?

Candidates should apply directly on the official CloudZero careers website.

Ready to apply?

The application is on the official CloudZero careers page.

Apply on company site