Teams at BeyondTrust

Own design, implementation, and production support of Windows kernel-mode enforcement drivers (filesystem, process/thread, handles, registry) and the kernel/user-mode enforcement boundary. Reduce enforcement latency at scale, extend enforcement to containers and isolation, ensure compatibility across Windows builds, handle driver signing and deployment, collaborate cross-platform on policy and the Rust userspace agent, and mentor engineers while driving technical direction and operational stability.

Lead macOS endpoint enforcement: design and own userspace agent, synchronous allow/deny path, Network Extension content filtering, performance and stability across macOS versions and hardware, mentor engineers, and represent macOS in cross-platform policy and architecture decisions.

Own and architect Linux kernel-space enforcement for an identity security platform using eBPF and BPF LSM hooks. Build kernel and userspace enforcement boundary, optimize syscall hot paths, extend enforcement to containers and Kubernetes, ensure portability across kernel versions, collaborate on shared policy/backend, mentor engineers, and drive production-grade, low-latency security enforcement.