Staff Software Engineer

Job Description: Senior Linux Systems Engineer – Security & Identity Role Overview We are seeking a Senior Linux systems engineer with over 10 years of specialized experience in low-level C/C++ systems programming, cryptographic network security, and enterprise identity integration. In this role, you will architect, build, and secure core Linux infrastructure components. You will be responsible for designing high-throughput Linux daemons, authoring custom PAM modules, automating X.509 certificate lifecycles, and hardening enterprise software against complex, system-level vulnerabilities. Key Responsibilities Low-Level Systems Development: Architect and build high-performance, fault-tolerant Linux daemons using modern C/C++ and POSIX APIs. Identity & Authentication Engineering: Design and implement custom Pluggable Authentication Modules (PAM) and integrate systems seamlessly with enterprise identity providers (Active Directory, LDAP, Kerberos, SSSD). Cryptography & PKI Management: Implement robust end-to-end transport and storage security using Open SSL/Wolf SSL APIs; manage and automate X.509 PKI certificate lifecycles, m TLS configurations, and cryptographic operations. System Hardening & Security: Enforce system safety across Linux environments using granular security policies (Seccomp, SELinux/App Armor) and secure coding standards (constant-time cryptographic execution, memory safety). Network Analysis & Debugging: Diagnose, trace, and resolve complex network- and protocol-level bottlenecks or security flaws across TCP/IP stacks using advanced tools. Required Qualifications & Technical Expertise Experience 10+ years of hands-on experience in Linux systems programming, enterprise security engineering, or low-level software architecture. Technical Domain Capabilities Languages & Toolchains: Proficient in C, C++, POSIX APIs, CMake, Make, GCC/Clang, GDB, and advanced Shell Scripting (Bash). Linux Systems Programming: Deep knowledge of IPC (Unix Sockets, Shared Memory, Message Queues), Concurrency/Threading (pthreads), Asynchronous Event Loops (epoll, io_uring), Custom Daemon development, and manual Memory Management. Cryptography & Security: Direct API-level experience with Open SSL/Wolf SSL, TLS 1.2/1.3, m TLS, X.509 PKI, PEM/DER encoding, symmetric/asymmetric ciphers, HMAC, and constant-time cryptographic programming. Authentication & Identity Integration: Demonstrated experience with PAM module development, Active Directory (AD), LDAP, SSSD, Kerberos/GSSAPI, and enterprise OAuth2/OIDC protocols. Networking & Linux Hardening: Expert understanding of TCP/IP, socket-level programming, Seccomp sandboxing, App Armor/SELinux mandatory access control, and network tracing tools (tcpdump, Wireshark). AI-Assisted Engineering Practice: AI Collaboration: Demonstrated expertise leveraging advanced AI coding tools (e.g., Cursor, Claude) as force-multiplier co-workers to accelerate low-level engineering workflows. Spec-Driven Methodology: Strong foundation in AI spec-driven development practices (e.g., Plan/BMAD modes) to design, map, and implement full SDLC phases. AI Code Review & Governance: Ability to critically inspect, profile, and audit AI-generated code for zero-trust security, memory safety, architectural integrity, and performance bottlenecks. Broadcom is proud to be an equal opportunity employer. We will consider qualified applicants without regard to race, color, creed, religion, sex, sexual orientation, national origin, citizenship, disability status, medical condition, pregnancy, protected veteran status, or any other characteristic protected by federal, state, or local law. We will also consider qualified applicants with arrest and conviction records consistent with local law. Broadcom is proud to be an equal opportunity employer. We will consider qualified applicants without regard to race, color, creed, religion, sex, sexual orientation, national origin, citizenship, disability status, medical condition, pregnancy, protected veteran status or any other characteristic protected by federal, state, or local law. We will also consider qualified applicants with arrest and conviction records consistent with local law. If you are located outside USA, please be sure to fill out a home address as this will be used for future correspondence. Welcome! Thank you for your interest in Broadcom! We are a global technology leader that designs, develops and supplies a broad range of semiconductor and infrastructure software solutions. For more information please visit our video library and check out our Connected by Broadcom series. Follow us on Linked In Broadcom Inc.