Staff Software Engineer

Job Description

Senior Linux Systems Engineer – Security & Identity

Role Overview

We are seeking a Senior Linux systems engineer with over 10 years of specialized experience in low-level C/C++ systems programming, cryptographic network security, and enterprise identity integration. In this role, you will architect, build, and secure core Linux infrastructure components. You will be responsible for designing high-throughput Linux daemons, authoring custom PAM modules, automating X.509 certificate lifecycles, and hardening enterprise software against complex, system-level vulnerabilities.

Key Responsibilities

• Low-Level Systems Development: Architect and build high-performance, fault-tolerant Linux daemons using modern C/C++ and POSIX APIs.
• Identity & Authentication Engineering: Design and implement custom Pluggable Authentication Modules (PAM) and integrate systems seamlessly with enterprise identity providers (Active Directory, LDAP, Kerberos, SSSD).
• Cryptography & PKI Management: Implement robust end-to-end transport and storage security using OpenSSL/WolfSSL APIs; manage and automate X.509 PKI certificate lifecycles, mTLS configurations, and cryptographic operations.
• System Hardening & Security: Enforce system safety across Linux environments using granular security policies (Seccomp, SELinux/AppArmor) and secure coding standards (constant-time cryptographic execution, memory safety).
• Network Analysis & Debugging: Diagnose, trace, and resolve complex network- and protocol-level bottlenecks or security flaws across TCP/IP stacks using advanced tools.

Experience

Required Qualifications & Technical Expertise

• 10+ years of hands-on experience in Linux systems programming, enterprise security engineering, or low-level software architecture.
• Technical Domain Capabilities
• Languages & Toolchains: Proficient in C, C++, POSIX APIs, CMake, Make, GCC/Clang, GDB, and advanced Shell Scripting (Bash).
• Linux Systems Programming: Deep knowledge of IPC (Unix Sockets, Shared Memory, Message Queues), Concurrency/Threading (pthreads), Asynchronous Event Loops (epoll, io_uring), Custom Daemon development, and manual Memory Management.
• Cryptography & Security: Direct API-level experience with OpenSSL/WolfSSL, TLS 1.2/1.3, mTLS, X.509 PKI, PEM/DER encoding, symmetric/asymmetric ciphers, HMAC, and constant-time cryptographic programming.
• Authentication & Identity Integration: Demonstrated experience with PAM module development, Active Directory (AD), LDAP, SSSD, Kerberos/GSSAPI, and enterprise OAuth2/OIDC protocols.
• Networking & Linux Hardening: Expert understanding of TCP/IP, socket-level programming, Seccomp sandboxing, AppArmor/SELinux mandatory access control, and network tracing tools (tcpdump, Wireshark).

AI-Assisted Engineering Practice

• AI Collaboration: Demonstrated expertise leveraging advanced AI coding tools (e.g., Cursor, Claude) as force-multiplier co-workers to accelerate low-level engineering workflows. Spec-Driven Methodology: Strong foundation in AI spec-driven development practices (e.g., Plan/BMAD modes) to design, map, and implement full SDLC phases.
• AI Code Review & Governance: Ability to critically inspect, profile, and audit AI-generated code for zero-trust security, memory safety, architectural integrity, and performance bottlenecks.

Broadcom is proud to be an equal opportunity employer. We will consider qualified applicants without regard to race, color, creed, religion, sex, sexual orientation, national origin, citizenship, disability status, medical condition, pregnancy, protected veteran status, or any other characteristic protected by federal, state, or local law. We will also consider qualified applicants with arrest and conviction records consistent with local law.

R027024