Senior Software Engineer, Endpoint Agent
Location
United States
Posted
3 days ago
Salary
Not specified
No structured requirement data.
Job Description
Role Description
Keeper Security is hiring a Senior Software Engineer to help build and scale the MacOS endpoint agent for our Endpoint Privilege Manager (EPM/KEPM) solution. This is a 100% remote position, with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL or El Dorado Hills, CA metro areas.
As a Senior Software Engineer on the EPM macOS Agent team, you will remain hands-on designing and implementing agent capabilities that run on endpoints and enforce privilege policy in real time. You’ll build elevation workflows, local policy evaluation, telemetry and audit logging, and hardened controls that operate reliably at scale across enterprise macOS environments. You will partner closely with Product, QA Automation and Security to ship high-quality releases and continuously strengthen security and operability.
Responsibilities
- Design, build, and maintain macOS agent components for EPM, including elevation workflows, policy enforcement, and audit logging.
- Implement secure local policy evaluation and caching to support offline/online operation and consistent enforcement.
- Build robust agent lifecycle capabilities including installation, upgrades, rollback safety, notarization/signing, and configuration management.
- Integrate the agent with management-plane services and APIs for policy distribution, device identity, telemetry, and reporting.
- Strengthen tamper resistance and abuse prevention, including hardening service/daemon behavior and agent configuration/update flows.
- Improve diagnostics and observability (structured logs, health signals, performance profiling, crash handling) to support enterprise deployments.
- Collaborate with QA Automation to improve test coverage and reliability across unit, integration and end-to-end test suites.
- Participate in secure SDLC practices, threat modeling, code reviews, and on-call/incident response as needed.
Qualifications
- 5+ years of professional software engineering experience delivering production software.
- Strong experience building macOS-native software such as daemons/services, endpoint agents, system utilities, or security tooling.
- Proficiency in one or more languages commonly used for macOS agent development (e.g., Swift/Objective-C, C/C++, Rust, Go).
- Solid understanding of macOS security and privilege models (process execution, entitlements, TCC/privacy controls, least privilege patterns).
- Experience with packaging and enterprise deployment patterns on macOS (pkg, signing, notarization, MDM distribution).
- Strong debugging skills for complex issues (concurrency, performance, stability, and root cause analysis).
- Experience building automated tests and working in CI/CD environments; strong engineering hygiene around reviews and documentation.
- Strong communication skills and ability to partner cross-functionally with Product, QA and Security.
Preferred Qualifications
- Experience with endpoint privilege management, EDR/EPP agents, device management, or identity/security products.
- Familiarity with macOS platform security architecture (e.g., system extensions) and enterprise management workflows.
- Experience designing policy engines (rules evaluation, precedence, auditability, explainability).
- Familiarity with secure update mechanisms, signing/notarization, and release hardening for endpoint software.
- Exposure to IT admin and MSP workflows and macOS enterprise tooling (e.g., Jamf, Kandji, Intune for macOS).
- Exposure to secure SDLC practices and compliance-minded engineering (e.g., SOC 2, FedRAMP, NIST).
Benefits
- Medical, Dental & Vision (inclusive of domestic partnerships).
- Employer Paid Life Insurance & Employee/Spouse/Child Supplemental Life.
- Voluntary Short/Long Term Disability Insurance.
- 401K (Roth/Traditional).
- A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc.).
- Above-market annual bonuses.
Job Requirements
- 5+ years of professional software engineering experience delivering production software.
- Strong experience building macOS-native software such as daemons/services, endpoint agents, system utilities, or security tooling.
- Proficiency in one or more languages commonly used for macOS agent development (e.g., Swift/Objective-C, C/C++, Rust, Go).
- Solid understanding of macOS security and privilege models (process execution, entitlements, TCC/privacy controls, least privilege patterns).
- Experience with packaging and enterprise deployment patterns on macOS (pkg, signing, notarization, MDM distribution).
- Strong debugging skills for complex issues (concurrency, performance, stability, and root cause analysis).
- Experience building automated tests and working in CI/CD environments; strong engineering hygiene around reviews and documentation.
- Strong communication skills and ability to partner cross-functionally with Product, QA and Security.
- Preferred Qualifications
- Experience with endpoint privilege management, EDR/EPP agents, device management, or identity/security products.
- Familiarity with macOS platform security architecture (e.g., system extensions) and enterprise management workflows.
- Experience designing policy engines (rules evaluation, precedence, auditability, explainability).
- Familiarity with secure update mechanisms, signing/notarization, and release hardening for endpoint software.
- Exposure to IT admin and MSP workflows and macOS enterprise tooling (e.g., Jamf, Kandji, Intune for macOS).
- Exposure to secure SDLC practices and compliance-minded engineering (e.g., SOC 2, FedRAMP, NIST).
Benefits
- Medical, Dental & Vision (inclusive of domestic partnerships).
- Employer Paid Life Insurance & Employee/Spouse/Child Supplemental Life.
- Voluntary Short/Long Term Disability Insurance.
- 401K (Roth/Traditional).
- A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc.).
- Above-market annual bonuses.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
Cyber Security Engineer - Information System Security Officer
Illumination Works LLCAt Illumination Works, we know data, and we should, we’ve been doing it since we started in 2006! We specialize in everything data from big data to data science, data engineering, software engineering, and cloud design. We are a trusted technology partner in user-centered digital transformation—delivering impactful business results to clients. We partner with customers to solve their unique technology and data challenges and stay on top of modern technologies and advancements leveraging our Innovation Lab. Illumination Works is committed to hiring and retaining the best workforce. We hire the best talent for our customer’s needs. We make our hiring decisions without regard to race, color, religion, sexual orientation, gender identity or national origin, age, veteran status, disability, or any other protected class. Acceptable candidates must successfully pass a drug test and background screen.
Provide support for implementing and enforcing information systems security policies, standards, and methodologies. Assist in the evaluation of security solutions to ensure they meet security requirements for processing multiple types of information. Analyze threats and develop a...
Cloud Security Compliance Engineer (6099)
itD TechAbout itD: We are part of a new generation of consulting and software development company that blends diversity, innovation, and integrity with real business results. Our structure rejects any strong hierarchy, empowering us to deliver excellent results. We are a woman- and minority-led firm. Every day, we challenge ourselves to be considerate, fair and to re-think what great outcomes mean for our customers. This permeates down to how we approach every interaction, on every project, for every client. You’ll thrive here if you are a dynamic self-starter, a difference-maker or someone who wants to deliver great results, without constraints. The itD Digital Experience: Joining us means you’ll be part of our global community, you have a say about your own career journey, and you’ll get a chance to give back to causes that matter. You will experience working with Fortune 500 companies and high-performance teams across numerous industries. itD offers our employees excellent benefits such as medical, dental, vision, life insurance, paid holidays, 401K + matching, networking & career learning and development programs. We are growing and we want to see you grow! Visit https://itdtech.com/careers to learn more about what working at itD can mean for you. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. itD is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or to perform the essential functions of a position, please contact us at recruiting@itdtech.com and let us know the nature of your request and your contact information. Dynamic environment in a culture of respect, empowerment and recognition for a job well done, apply today!
This role involves leading the design and implementation of automated processes and tools for collecting and managing evidence required for SOC 2 compliance within cloud environments. Responsibilities include establishing evidence retention policies, collaborating cross-functionally, and producing detailed compliance reports to ensure audit readiness.
Network Technology & Security Consultant
AECOMWe are the world’s trusted infrastructure consulting firm.
The consultant will perform cybersecurity assessments of OT/ICS environments, including identifying vulnerabilities, analyzing risk posture, and developing actionable remediation plans aligned with industry standards. Responsibilities also include supporting the implementation and documentation of controls under the Risk Management Framework (RMF) and developing required cybersecurity documentation for Federal clients.
The role involves building and operating cloud security automation using Infrastructure-as-Code and CI/CD tooling, focusing on embedding secure-by-design principles across cloud platforms. Key tasks include automating AWS security compliance enforcement, implementing automated detection and remediation for misconfigurations, and developing reusable security frameworks.
