Full-Time

Staff Engineer

Windows Kernel Driver

Posted on 10/31/2025

Illumio

Illumio

501-1,000 employees

Adaptive security platform for micro-segmentation

Compensation Overview

$192k - $230k/yr

+ Base Salary

Sunnyvale, CA, USA

In Person

Category
Software Engineering (1)
Required Skills
Data Structures & Algorithms
C/C++
Requirements
  • Bachelor’s in computer science or equivalent degree
  • 8+ years building distributed and scalable software systems
  • Expertise in programming in C or C++ (11/14/17/20)
  • Sound networking programming skills at the ip/socket or lower level
  • Experience with Windows kernel level debugging
  • Experience developing multi-process and multi-threaded applications
  • Must have written production quality Windows Kernel Drivers
  • Familiarity with, and passion for Windows Filtering Platform (WFP), and related technologies
  • Solid foundation in data structures, algorithms, networking concepts, and debugging skills
Responsibilities
  • Build a new, unprecedented way to orchestrate Zero Trust segmentation down to the application utilizing the Windows Filtering Platform
  • Use the latest technologies and C++ standard
  • Own and design critical features and subsystems, work out all the details, and defend the design before your peers
  • Deliver a rock-solid implementation that is elegant, simple, scalable, stable, secure, and supportable
  • Work with the field organization and key customers to shape this novel product
Desired Qualifications
  • Master’s degree in computer science or related field
  • Experience with other firewalling technologies such as iptables, nftables, or packet filter
  • Familiarity with BPF/eBPF

Illumio provides adaptive cybersecurity for large enterprises, offering the Adaptive Security Platform (ASP) that secures data centers and cloud environments. The platform delivers visibility, security, and encryption by segmenting enterprise networks into small, isolated parts (micro-segmentation). This containment limits breach spreading, so if one segment is compromised, others stay secure. The product works as a subscription service, with ongoing access to the platform and services, and benefits from updates and partnerships with leading technology providers. Illumio differentiates itself through its focus on adaptive security and micro-segmentation across both on-premises data centers and cloud, backed by a track record of awards and leadership. The company’s goal is to help large organizations prevent cyber threats and protect sensitive data by making networks smaller, more manageable, and harder to breach.

Company Size

501-1,000

Company Stage

Series F

Total Funding

$557.7M

Headquarters

Sunnyvale, California

Founded

2013

Simplify Jobs

Simplify's Take

What believers are saying

  • Deloitte partnership targets regulated sectors (banking, insurance, energy) with DORA compliance focus.
  • IT/OT integration with Armis opens critical infrastructure verticals requiring NERC CIP compliance.
  • Microsoft enterprise deployment across entire corporate IT validates platform at scale and expands ecosystem.

What critics are saying

  • Cisco-Splunk integration directly competes with Illumio Insights agentless visibility capabilities.
  • Palo Alto Prisma Cloud SASE commoditizes core ASP offering through bundled enterprise sales.
  • CrowdStrike Falcon Complete MDR incorporates microsegmentation, flooding market with endpoint-to-cloud containment.

What makes Illumio unique

  • AI security graph powers breach containment across hybrid multi-cloud environments uniquely.
  • Agentless visibility leverages existing Check Point and Fortinet firewalls without agent deployment.
  • Role-based Insights Agent reduces alert fatigue with persona-driven threat detection and one-click containment.

Help us improve and share your feedback! Did you find this helpful?

Benefits

HSA

Health Reimbursement Account

Wellness Program

Fitness Subsidies

Health Insurance

Dental Insurance

Vision Insurance

Life Insurance

Short-Term Disability

Long-Term Disability

FSA

Leave of Absence

Paid Holidays

Unlimited Vacation

Paid Family Leave

Paid Vacation

Personal/Sick Days

Company Equity

401(k)

Performance Bonus

Promote from Within

Lunch and Learns

Work Visa Sponsorship

Leadership Training Program

Commuter Benefits Program

Casual Dress

Pet-Friendly Office

Happy Hours

Snacks

Some Meals Provided

Diversity, Equity, and Inclusion Program

Flexible Work Hours

Remote Work Opportunities

Hybrid Work Opportunities

On-Site Cafeteria

Work-From-Home Stipend

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

0%

2 year growth

1%
Consultancy.nl
Apr 10th, 2026
Deloitte expands cybersecurity portfolio through collaboration with Illumio.

Deloitte expands cybersecurity portfolio through collaboration with Illumio. April 10, 2026 Consultancy.nl Illumio, a global provider of cyber incident containment solutions, has formed a strategic alliance with Deloitte. The American company Illumio helps organizations visualize cyber risks, detect attacks, and immediately contain threats. By adding the Illumio platform to its portfolio, Deloitte deepens its cybersecurity capabilities. 'In the current threat landscape, organizations cannot prevent every cyberattack, but they can determine what happens afterwards. Through this collaboration, we make it easier for companies to strengthen their cyber resilience without additional risks or operational complexity,' said Pete Wilson, Senior Director at Illumio. The collaboration combines Deloitte's expertise in advisory and implementation with Illumio's 'breach containment platform.' The joint go-to-market strategy particularly targets highly regulated sectors, including banking, insurance, and energy. Additionally, Illumio and the Big Four firm focus on organizations struggling to comply with regulations such as the Digital Operational Resilience Act (DORA). 'With this collaboration, we further expand our cybersecurity capabilities and make it easier for our clients to enhance their operational resilience, improve attack response and recovery, and accelerate Zero Trust initiatives,' said Delisa Stone, Partner at Deloitte. Wilson adds: 'Deloitte's strong reputation and proven expertise in helping organizations adopt innovative cybersecurity solutions, combined with our cyber incident containment platform, make this collaboration a powerful proposition for organizations looking to strengthen their ability to detect, respond to, and recover from cyberattacks.'

The Associated Press
Feb 26th, 2026
Illumio launches agentless breach containment platform for hybrid cloud and data center environments

Illumio has unveiled the first platform combining agentless visibility and breach containment for hybrid environments. Illumio Insights ingests real-time telemetry from Check Point and Fortinet firewalls, converting firewall data into traffic maps that provide end-to-end visibility across data center and cloud estates without installing agents. The agentless approach leverages existing firewall infrastructure to map application traffic, identify vulnerabilities and detect lateral movement. Security teams gain unified visibility across cloud and on-premises environments whilst accelerating Zero Trust adoption. The solution works alongside Illumio Segmentation to enforce microsegmentation policies that stop ransomware spread. Together they form the Illumio Platform, designed for breach containment across hybrid environments. Illumio is recognised as a Leader in the Forrester Wave for Microsegmentation.

Illumio
Feb 23rd, 2026
The Complete Guide to Illumio at RSAC Conference 2026

The complete guide to Illumio at RSAC Conference 2026. RSAC is back March 23-26! Make Illumio your first stop at Booth N-5670 at San Francisco's Moscone Center. We're bringing hands-on demos, executive conversations, and speaking sessions focused on the most important layer of cybersecurity: breach containment. What to expect from Illumio. Here is what to expect when you stop by: * Live demos of Illumio Insights and Illumio Segmentation. See AI-driven threat detection, real-time observability, and single-click breach containment across hybrid multi-cloud environments. * Eight demo stations and an in-booth theater. Watch breaches unfold, see how attackers move laterally, and learn how Zero Trust segmentation changes the outcome. * Real conversations with Illumio experts. Talk directly with engineers, architects, and security leaders about what works, what does not, and how teams are applying Zero Trust in practice. Request a meeting with our team today. * The Illumio Pub Crawl on Wednesday at 4:30-6:00 PM. Stop by the booth, grab a refreshment, and have a conversation with peers about the state of security today. Join us for 4 RSAC speaking sessions. Join Illumio across four RSAC sessions focused on Zero Trust, breach containment, and the realities shaping modern security. Resilience assumes systems will bounce back after stress. Anti-fragility assumes they learn, adapt, and improve because of it. Join John Kindervag, chief evangelist at Illumio, alongside Anthony Rodriguez, AVP of application security engineering and threat management at CVS Health, on Monday, March 23 at 10:50-11:40 AM at the Moscone South Esplanade. In this session, John reframes resilience through the lens of Zero Trust, while Anthony shares how CVS Health uses segmentation and dependency mapping to expose risk faster, troubleshoot incidents more efficiently, and measure progress in ways that actually matter. Attendees can expect concrete steps, practical metrics, and a clear path beyond simply hoping systems hold when pressure hits. As IT and OT environments collide, attackers don't see boundaries, but legacy security models do. On Tuesday, March 24 at 1:15-2:05 PM in the Moscone South Esplanade, John Kindervag will join Ofir Arkin, senior distinguished architect at NVIDIA. They'll discuss how to apply Zero Trust consistently across IT and OT using protect surfaces, deep visibility, and AI-driven security enables modernization without ripping and replacing critical systems. If you care about resilience, safety, and standards alignment in industrial environments, this one is a must-see. This interactive roundtable with John Kindervag on Thursday, March 26 at 10:50-11:40 AM in the Moscone Center cuts through the noise. AI hype, tool sprawl, fear-driven budgets: they dominate the conversation. But they don't always deliver resilience. John leads a candid discussion on what actually works, what doesn't, and which uncomfortable truths the industry keeps avoiding. How does Victorian-era life insurance relate to modern-day cybersecurity? Join John Kindervag on Thursday, March 26 at 12:20-1:10 PM in the Moscone Center as he explores how cyber insurance payouts unintentionally fueled ransomware's growth and how Zero Trust and segmentation can help realign incentives. The goal isn't eliminating cyber insurance. It's shrinking the blast radius so payouts drop and attackers lose their economic advantage. Save your spot for illumio-sponsored RSAC events. Illumio at RSAC extends well beyond the expo floor. Register today for these events so you don't miss out. Cloud Security Alliance evening reception. Illumio is proud to sponsor an evening reception with the Cloud Security Alliance on Monday, March 23 at 6:30-8:30 PM at Fang Restaurant. It's a relaxed setting to connect with peers, share perspectives, and continue the RSAC conversation off the expo floor. RSVP now to save your spot. Carahsoft Public Sector Day. Illumio is a sponsor of Carahsoft Public Sector Day, hosted at the Hilton San Francisco Union Square on March 23 at 8:00 AM- 3:00 PM. If public sector security is part of your mission, this is where those conversations happen. Illumio Happy Hour. Customers, partners, prospects, and badged RSAC attendees are all welcome at the Illumio Happy Hour on Wednesday, March 25 at 6:00-8:00 PM at Delarosa Downtown. Join us for good conversations, good food, and a relaxing atmosphere. RSAC 2026 conference details. RSAC Conference returns to San Francisco from March 23-March 26 at the Moscone Convention Center located at 701 Howard Street. Last year, more than 43,000 attendees joined the conference in person, making RSAC one of the most important gatherings in cybersecurity. Expo hours are as follows: * Monday 5:00-7:00 PM * Tuesday 10:00 AM-6:00 PM * Wednesday 9:30 AM-6:00 PM * Thursday 10:00 AM-2:00 PM Illumio will be present throughout the week with demos, meetings, sessions, and events. Excited to attend RSAC? Save on registration using these discount codes: We can't wait to see you at RSAC 2026! Senior Global Events Manager February 23, 2026 3 min. read Article content

SourceSecurity.com
Feb 12th, 2026
Illumio & Armis: Unified IT/OT security strategies

Illumio & Armis: unified IT/OT security strategies. 12 Feb 2026 Quick Read Summary is AI-generated, newsdesk-reviewed * Illumio and Armis enhance IT/OT security with unified threat detection and breach containment. * The integration offers comprehensive device visibility, risk prioritisation, and dynamic containment. * Zero Trust approach reduces breach impact, ensuring compliance with key security standards. Illumio, Inc. has announced an expanded collaboration with Armis, enhancing the security of both information technology (IT) and operational technology (OT) systems. This integration aims to bolster risk management and advance market strategies, delivering robust insights into potential vulnerabilities and coordinated threat response. Unified IT/OT security approach. The partnership involves the integration of the Illumio Platform - featuring both Illumio Insights and Illumio Segmentation - alongside Armis Centrix(TM), Armis's platform for cyber exposure management. This joint offering equips businesses with the capability to detect security threats at an early stage, automate breach containment, and instil resilience within their most susceptible infrastructure. Addressing the most vulnerable systems. According to Izrael, the collaboration merges visibility, asset intelligence, and enforcement Acquiring comprehensive knowledge of connected assets and recognising where risks are prevalent is crucial for securing an organisation's entire attack surface, as highlighted by Nadir Izrael, CTO and Co-Founder of Armis. According to Izrael, the collaboration merges visibility, asset intelligence, and enforcement, enabling decisive action against threats, thereby safeguarding critical operations without disruption. A unified zero trust security model. This enhanced collaboration couples Illumio's breach containment strategy with Armis's ongoing cyber exposure management capabilities to create a cohesive Zero Trust approach for IT and OT ecosystems. With Illumio Insights incorporated, the alliance transcends basic segmentation, evolving into an intrinsic function that simplifies operations while promoting proactive threat containment. Key integration features. * Comprehensive Asset Visibility: Armis classifies all IT, OT, and IoT devices, including unmanaged and legacy assets, and shares this data with the Illumio Platform for elevated visibility and mapping. * Risk Prioritisation: Armis's intelligence augments Illumio Insights, identifying opportunities for impactful segmentation. * Dynamic Containment: Illumio enforces microsegmentation to inhibit lateral movement upon anomaly detection by Armis. * SOC Integration: The integration supports faster investigations by synchronizing with SOC workflows, SIEM, and SOAR. Sustaining continuous asset intelligence. This partnership facilitates Zero Trust methodologies across IT, OT, and IoT domains This partnership facilitates Zero Trust methodologies across IT, OT, and IoT domains, reducing breach impacts via swift containment. It also aids compliance with standards such as NERC CIP, IEC 62443, and NIST 800-82. Todd Palmer, SVP of Global Partner Sales and Alliances at Illumio, emphasises that compromised environments jeopardise not only uptime but also safety, infrastructure, and trust. By merging Illumio's breach containment with Armis's asset intelligence, teams achieve enhanced insight and command, ensuring critical systems remain operational. Protecting critical infrastructure. Beyond technological collaboration, Illumio and Armis are synchronising their marketing strategies to facilitate easier access to, and deployment of, advanced Zero Trust Security solutions. This harmonious approach ensures customers receive seamless integration, expert advice, and a unified strategy for strengthening critical infrastructure protection. The Illumio Platform provides AI-driven cloud detection and proactive control over threat movement across hybrid and multi-cloud environments, underscoring its commitment to comprehensive breach containment. The Illumio and Armis integration is now accessible to joint customers globally.

Yahoo Finance
Feb 3rd, 2026
FireMon and Illumio launch industry's first Zero Trust control plane for hybrid enterprises

FireMon has launched an integration with Illumio that provides unified control over microsegmentation and traditional firewall policies from a single platform. The system addresses a critical gap in zero trust adoption by automatically detecting and resolving policy conflicts between segmentation and firewall rules across network, cloud and host environments. The integration moves beyond application visibility to deliver operational policy management, consolidating governance and change workflows across hybrid environments. This enables organisations to advance zero trust initiatives from prototype to production by eliminating conflicts that typically stall deployments. FireMon has raised $295 million to date. The solution combines Illumio's intent-based microsegmentation with FireMon's policy governance capabilities, providing consistent enforcement across distributed infrastructure whilst reducing manual oversight and compliance gaps.

INACTIVE