---
title: 'Staff/Principal Software Engineer-Windows Endpoint Agent at CloudZero'
canonical: 'https://feeny.ai/job/staff-principal-software-engineer-windows-endpoint-agent-cloudzero-remote-f7nw3tr1rpev'
type: 'job'
last_seen: '2026-09-10'
---

# Staff/Principal Software Engineer-Windows Endpoint Agent at CloudZero

- **Company:** CloudZero
- **Location:** Remote
- **Compensation:** $220k–$290k
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-08-31
- **Last confirmed live:** 2026-09-10
- **Apply:** https://jobs.ashbyhq.com/cloudzero/c88a68f3-8d84-4925-b7bb-95f7cf45ae9a

## Job description

## About the Role

CloudZero's AI cost intelligence starts at the endpoint. Our macOS collector already captures what coding agents and AI workloads actually cost on the developer's machine: token usage, cost per workflow, latency, and where the value goes. Windows is next, and it is the platform most of our enterprise customers run on. We are not starting from zero. We have a working proof of concept, a Windows Filtering Platform callout driver that redirects AI provider traffic to a user-mode relay, and that relay shares the same Go capture core as our macOS agent. What we need now is an engineer who can take that from a test-signed lab prototype to something we can sign, ship, and run on customer machines without ever getting in the user's way. This is real Windows systems work. You will own the kernel-mode driver, the user-mode service, the signing and packaging story, and the fail-open behavior that keeps a customer's network working even when our agent does not. A bug here can blue-screen a machine or break someone's connectivity, so the bar for care is high and the ownership is real. You will set the pattern that every endpoint after Windows follows.

## What You’ll Do

- Take the Windows agent from proof of concept to a signed, installable, auto-updating product that runs on Windows.
- Own the WFP callout driver (KMDF, C/C++) and the user-mode Go relay that reuses our shared capture core, and keep the two in lockstep as both evolve
- Solve production kernel-mode driver signing, EV certificate, Microsoft attestation, Secure Boot, without weakening code integrity on the customer's machine
- Build the installer, update, and clean uninstall path (MSI or MSIX), and the enterprise deployment story
- Design for fail-open. Non-AI traffic must never touch our code, and a driver or service failure must never break the endpoint
- Manage local CA trust and TLS interception, so it is safe, transparent, and fully reversible
- Build the endpoint client in Electron and TypeScript, and work directly with product on what the Windows agent exposes to the customer and where it needs to reach parity with macOS
- Raise the bar for the engineers around you through code review, design feedback, and direct mentorship

## What You Bring

- Deep Windows systems experience. You have shipped software that runs as a service, a driver, or an endpoint agent on Windows, not just applications on top of it
- Kernel-mode or low-level Windows development. KMDF or WDM, the Windows Driver Kit, and comfort debugging with WinDbg
- Working knowledge of Windows networking internals, the Windows Filtering Platform or a comparable traffic interception approach
- Proficiency in C or C++ for the driver side, in Go or another systems language for the user-mode side. You can read and reason about code in a language you did not write
- Comfort spanning the stack from a kernel driver to a desktop UI, or the self-awareness to say which end is your strength and where you will lean on the team
- Hands-on experience with Windows code signing and the realities of shipping a signed kernel driver, Authenticode, EV certificates, and Microsoft's attestation or WHQL process
- A track record of shipping endpoint software to machines you do not control, with the instinct to design for failure, cleanup, and least privilege
- The judgment to know when a kernel-level solution is worth it and when it is not, and the ability to explain that tradeoff to engineers, product, and leadership
- A track record of shipping, not just designing

Bonus If You Have...

- Built endpoint security, EDR, DLP, or network monitoring agents at enterprise scale
- Experience with TLS interception, MITM proxies, or certificate trust management
- Packaging and distribution experience with MSIX, MSI or WiX, or auto-update frameworks
- Familiarity with enterprise Windows deployment through Intune, MDM, or Group Policy
- Cross-platform endpoint experience spanning Windows and macOS
- You use AI coding tools in your own work and can describe your workflow and where they fail you

## About CloudZero

CloudZero is the AI ROI Company. We built the financial control plane for AI: the system finance, IT, and engineering use to connect every AI dollar to the outcome it produced. Across every provider. In real time. AI spend is the fastest-growing line on enterprise P&Ls and the least understood. Only 14% of CFOs can prove AI ROI today. CloudZero answers the question no one else can: what did it cost to produce this outcome, for this customer, on this model. The largest cloud spenders on the planet already run on CloudZero, including Coinbase, Duolingo, DoorDash, and Shutterstock. We processed 14 trillion billing events in the last twelve months. We're the first listed partner on Anthropic's cost and usage API. We've raised over $119 million, including a[$56 million Series C](https://www.cloudzero.com/press-releases/20250528/) backed by leading venture capital firms. Why Join Our Team? At CloudZero, you’ll find a collaborative, fast-moving environment where your work makes a direct impact. We’re a team that values ownership, creativity, and curiosity — and we’re tackling some of the most complex challenges in the cloud space. If you’re excited by working with cutting-edge technology, driving meaningful outcomes, and growing with a company that’s scaling fast, we’d love to hear from you!

## About CloudZero

## Company Overview
- **One-liner**: CloudZero is the AI ROI Company that provides a financial control plane for cloud and AI spend, helping businesses connect every dollar spent to measurable business outcomes.
- **Entity Type**: Private (Series B)
- **Headquarters**: Boston, Massachusetts, USA
- **Founded**: 2016
- **Founders**: Erik Peterson (co-founder)

## Core Business
- **Primary industry**: FinOps / Cloud Cost Management / AI Spend Intelligence
- **Target customers**: B2B, Enterprise (Engineering leaders like CTOs, VPs of Engineering; Finance leaders like CFOs, FP&A; Platform and cloud ops teams)
- **Mission / Purpose**: To help the world's most ambitious businesses turn cloud and AI spend into measurable value. The company's vision is to be the only platform to quantify and maximize the ROI of every cloud and AI dollar spent.

## Products & Services
- **CloudZero Platform**: A SaaS platform that unifies cost and usage data from any AI platform, cloud provider (AWS, GCP, Azure), and SaaS tool (Snowflake, Datadog, MongoDB, Kubernetes) into a single pane of glass. It provides multi-dimensional allocation, real-time anomaly detection, and AI outcome attribution.
- **CostFormation**: A code-driven approach for allocating costs, allowing platform and cloud ops teams to author allocation structure so finance and engineering see the same numbers.
- **AI Hub**: Connects AI spend to specific models, providers, prompt patterns, and coding agents (Claude Code, Cursor, GitHub Copilot) to show cost context where engineers work.
- **Analytics (BI capability)**: A business intelligence feature released in 2023 to improve business efficiency.
- **AnyCost**: An API launched in 2019 to combine cost data from any cloud provider.

## Market Standing
- **Valuation**: Not publicly disclosed.
- **Key Metric**: Over $14 billion in cloud spend under management. The company raised $32 million in Series B funding.
- **Notable Investors/Partners**: Not fully disclosed, but notable milestones include joining the AWS ISV Accelerate Program, the FinOps Foundation Governing Board, and achieving SOC 1 Type 2 certification. Phil Pergola (former CloudHealth executive) joined as CEO.
- **Growth Signals**: Named a "Strong Performer" in the Forrester CCMO Wave, a "Visionary" in the Gartner MQ for CFM Tools, and "Best Places to Work" by Boston Business Journal. The platform is certified by the FinOps Foundation. Average time to pay for itself is 3 months, with average cloud savings of 22% in year one and a 33% average Cloud Efficiency Rate improvement.

## Competitive Advantages
- **Depth of Allocation**: The only engine that allocates AI, cloud, and Kubernetes cost at the depth of customer, feature, workflow, and model, fueling unit economics.
- **Real-time Data**: Streaming telemetry captures every AI call as it happens, with anomaly signals in seconds and full dimensional allocation in hours.
- **Outcome Attribution**: Maps AI spend to business outcomes (customer, product, transaction, P&L), not just activity metrics.
- **No Monthly Overages**: Uses a tiered, predictable pricing model that doesn't vary month to month.
- **Speed to Value**: Can connect in minutes and uncover unit cost metrics in hours.

## Strategic Focus
- **AI ROI Leadership**: Positioning itself as the "AI ROI Company," the strategic focus is on helping companies govern AI spend and value as AI adoption explodes.
- **Category Creation**: Moving from category-creator to category-leader in the AI financial control plane space.
- **Platform Expansion**: Continuing to integrate with more AI platforms, coding agents, and business systems to unify the cost conversation across engineering and finance.

## Why Work Here
- **Remote-First Environment**: The company is remote-first, with a hub in Boston.
- **Culture & Values**: Core values include "Commit then iterate," "Own the outcome," "We, not I," "Delight the customer," "Nothing is sacred," "Less is more," and "Wait for no one."
- **Benefits**: Flexible Time Off, Home Office Stipend, "CZ Wellness" program, Recognition Program, Commuter Stipend, Catered Lunches, Focus Fridays, AI Build Days, and a Holiday Schedule.
- **Engineering Culture**: Emphasizes high-bar, low-ego talent, and a passion for all things cloud. The company is described as a "tight-knit team in a high-growth, fast-moving environment."
- **Growth Trajectory**: Job seekers are drawn to the opportunity to work at a high-growth startup that is defining a new category in AI spend intelligence.

## Sources
1. [CloudZero.com](https://www.cloudzero.com/)
2. [CloudZero About Page](https://www.cloudzero.com/about/)
3. [CloudZero Careers Page](https://www.cloudzero.com/careers/)
4. [CloudZero Jobs (Ashby)](https://jobs.ashbyhq.com/cloudzero)
5. [Built In Boston - CloudZero](https://builtin.com/company/cloudzero/faq/workplace-perception)

## Other roles at CloudZero

- [Senior AI Systems Engineer](https://feeny.ai/job/senior-ai-systems-engineer-cloudzero-boston-077tq4myxg1d) — Boston, MA
- [Technical Support Engineer II](https://feeny.ai/job/technical-support-engineer-ii-cloudzero-boston-m6mpncc0p1p3) — Boston, MA
- [Senior Product Marketing Manager](https://feeny.ai/job/senior-product-marketing-manager-cloudzero-boston-kcpebqvk70fv) — Boston, MA
- [Senior Director, Revenue Operations](https://feeny.ai/job/senior-director-revenue-operations-cloudzero-boston-9gva59n4f4jx) — Boston, MA
- [Senior Content Marketing Manager](https://feeny.ai/job/senior-content-marketing-manager-cloudzero-boston-5p5w4vw9jwm3) — Boston, MA
- [AI ROI Consultant](https://feeny.ai/job/ai-roi-consultant-cloudzero-boston-p3der7w7yxpa) — Boston, MA
- [Senior Technical Account Manager](https://feeny.ai/job/senior-technical-account-manager-cloudzero-boston-w0bzae0yzv77) — Boston, MA
- [Staff Technical Account Manager](https://feeny.ai/job/staff-technical-account-manager-cloudzero-boston-qh9y3hdf2jy8) — Boston, MA
- [Director, Brand & Corporate Communications](https://feeny.ai/job/director-brand-corporate-communications-cloudzero-san-francisco-b1gre1y8v4a4) — San Francisco, CA
- [Senior CloudOps Engineer](https://feeny.ai/job/senior-cloudops-engineer-cloudzero-boston-mt909xk95q66) — Boston, MA