[Remote] Senior Linux Engineer, Privileged Access

Note: The job is a remote job and is open to candidates in USA. Keeper Security is a cybersecurity software company that provides zero-knowledge and zero-trust security solutions, including privileged access management. The company is seeking a Senior Linux Systems Engineer to design and build secure endpoint privilege management capabilities, including Linux agents, PAM modules, privileged services, process authorization, and least-privilege enforcement mechanisms.

Responsibilities

• Design, develop and maintain Linux endpoint privilege management capabilities across Rust, C and .NET components
• Build and enhance kernel-facing agent functionality using Linux interfaces such as fanotify, the proc filesystem, namespaces, capabilities and process identity
• Develop and maintain native PAM modules and Linux privilege-elevation workflows
• Build long-running privileged Linux services using Rust, Tokio, MQTT, TLS and asynchronous programming patterns
• Develop Linux-specific orchestration and session-management capabilities in .NET 8, including process authentication, access controls, ephemeral accounts and session monitoring
• Diagnose complex Linux execution and security issues involving blocked processes, authentication races, permissions, SELinux, AppArmor and system service behavior
• Design secure privilege-enforcement mechanisms based on least privilege, process trust and protection against time-of-check/time-of-use (TOCTOU) and authorization race conditions
• Build and maintain systemd services, RPM and DEB packages, installation workflows, service hardening and operational diagnostics
• Collaborate with PAM, endpoint, QA and platform engineers on architecture, testing, cross-platform functionality and production troubleshooting
• Use AI-assisted development tools such as Claude, ChatGPT, GitHub Copilot or similar platforms to improve systems research, debugging, code development, testing and technical documentation

Skills

• 7+ years of professional software or systems engineering experience, with significant hands-on Linux systems programming experience
• Deep understanding of Linux process and security concepts, including the proc filesystem, user and group IDs, Linux capabilities, namespaces and process execution
• Strong C programming experience, including native Linux development, memory management, GCC and Make-based build workflows and defensive error handling
• Experience developing or integrating with Linux PAM and PAM configuration
• Strong Rust experience, including ownership, concurrency, asynchronous development and long-running service or daemon design
• Experience with Tokio or similar asynchronous Rust frameworks
• Working proficiency with C# and .NET in Linux environments
• Experience developing security-sensitive software involving authentication, authorization, privilege elevation, process trust or least-privilege controls
• Strong understanding of Linux service management and operations, including systemd, journalctl, SELinux and/or AppArmor, and RPM/DEB packaging
• Experience troubleshooting low-level Linux behavior using system logs, process inspection, tracing and reproducible test tools
• Ability to read Linux kernel and subsystem documentation and translate system behavior into secure production implementations
• Ability and willingness to use AI-assisted tools effectively to support systems programming, debugging, technical analysis, testing and documentation
• Bachelor's degree in Computer Science, Engineering or a related field, or equivalent practical experience
• Experience with MQTT or other event-driven messaging technologies used for agent, plugin or job execution
• Experience with Linux desktop session technologies, including X11, Wayland, GDM and D-Bus
• Familiarity with TLS, PKI, code signing and certificate-based process or plugin authentication
• Experience supporting multiple Linux distributions, particularly RHEL and Ubuntu, including differences between SELinux and AppArmor
• Experience with endpoint privilege management, privileged access management or endpoint security products
• Familiarity with Avalonia or another cross-platform Linux desktop UI framework
• Experience building Linux software for x86 and ARM architectures, including packaging and signing pipelines
• Familiarity with endpoint security architectures on Windows or macOS
• Strong understanding of authorization models such as allow, deny, approval and just-in-time elevation workflows

Benefits

• Medical, Dental & Vision (inclusive of domestic partnerships)
• Employer Paid Life Insurance & Employee/Spouse/Child Supplemental Life
• Voluntary Short/Long Term Disability Insurance
• 401K (Roth/Traditional)
• A generous PTO plan that celebrates your commitment and seniority (including paid Bereavement/Jury Duty, etc.)
• Above-market annual bonuses
• 100% remote position, with an opportunity to work a hybrid schedule for candidates based in the Chicago, IL or El Dorado Hills, CA metro areas

Company Overview

• Keeper Security is transforming cybersecurity for millions of individuals and thousands of organizations globally. It was founded in 2011, and is headquartered in Chicago, Illinois, USA, with a workforce of 501-1000 employees. Its website is https://www.keepersecurity.com.

Company H1B Sponsorship

• Keeper Security, Inc. has a track record of offering H1B sponsorships, with 1 in 2021. Please note that this does not guarantee sponsorship for this specific role.