Lead Product Engineer - Endpoint Agents & Security Platform

We need someone who can take a business objective, understand the existing system, identify the important questions, recommend an approach, and deliver working software.

For example, you might receive this objective:

“An MSP needs to deploy our agent, see accurate inventory under the correct customer, and understand when collection or uploading has failed.”

Or

“An MSP needs help building out the connection between Sentinel Command and their PSA platform to ensure that tickets are opened and closed in an automated manner.”

Your responsibility would be to turn that objective into an appropriately scoped release: define acceptance criteria, make technical decisions, implement the necessary changes, test the behavior, deploy it, and verify the result.

The founder will own business priorities, budget, and major product tradeoffs. You will own technical execution for the work you take on. We expect thoughtful questions and early discussion of risks-not a need for daily task breakdowns or someone else to finish the implementation.

You do not need to be the deepest specialist in every component. You do need enough technical breadth to own delivery, recognize your limits, and identify where focused specialist support is necessary.

What you will own

End-to-end product delivery. Translate business goals into practical implementation plans and acceptance criteria. Deliver capabilities across the necessary agent, API, database, backend, and interface components. Recommend scope reductions when they produce a more useful, dependable release.

Windows endpoint-agent development. Extend and maintain the existing C#/.NET collector, including system and software inventory, execution under appropriate security contexts, secure local configuration, offline buffering, retries, upload recovery, diagnostics, deployment, and updates. Account for real customer environments-not just a successful run on a development machine.

Multi-tenant platform engineering. Build reliable customer onboarding, device enrollment, asset ingestion, tenant isolation, permissions, background processing, and operational visibility. Ensure data and credentials remain correctly associated with the appropriate partner and customer.

MSP workflows and integrations. Develop integrations with relevant PSA, RMM, Microsoft 365, and other services. Handle customer mapping, synchronization, authentication, API limits, duplicate events, failures, and recovery.

Quality, security, and release readiness. Own meaningful automated tests, reproducible builds, deployment procedures, database migrations, and rollback or recovery plans where applicable. Treat secrets handling, access control, software-update integrity, and sensitive customer data as engineering requirements.

Maintainability and operational follow-through. Investigate defects, diagnose production issues, document important decisions, and leave work in a state another engineer can maintain. Improve the existing architecture where justified without defaulting to unnecessary rewrites., Other useful experience includes Azure, Microsoft Graph, ConnectWise PSA, Autotask, HaloPSA, RMM integrations, vulnerability-data processing, software normalization, signed software updates, and cross-platform agents.

Employment at a relevant vendor is a positive signal, not a substitute for having built and owned meaningful product components. Experience administering or supporting those products alone is not sufficient for this role.

Public open-source contributions are welcome but are not required. We recognize that substantial commercial engineering work is not publicly visible.

How we will work

You will work directly with a technical founder, with short communication paths and meaningful input into architecture and implementation.

We will agree on outcomes, priorities, and acceptance criteria rather than prescribe every development task. We expect regular working demonstrations, visible progress in company-controlled repositories, and early discussion of changes to scope or effort.

Delivery includes more than a merged pull request. For an agreed capability, completion means the implementation works in the intended environment, relevant failure cases have been addressed, tests and deployment instructions are available, and material limitations are clearly documented.

Autonomy does not mean working without support or guessing about business requirements. It means taking responsibility for moving the work forward and knowing when a decision needs input.

About Southern Sentinel Security

Southern Sentinel Security is building Sentinel Command, a security platform delivered through managed service providers and managed security service providers. The platform brings together asset visibility, vulnerability assessment, cloud security reviews, compliance, and exposure monitoring across customer environments.

We are looking for a hands-on technical owner to help expand the platform and its local endpoint agents. You will build on an existing product and C#/.NET Windows inventory collector-not start with a blank slate.

This is an individual-contributor role with substantial technical responsibility. It is not a non-coding management position.

Pay: $160,000.00 - $195,000.00 per year

Demonstrated independent delivery. You have personally taken commercial software capabilities from an incomplete business requirement through implementation, deployment, and post-release support. You can clearly distinguish your contribution from the work of the wider team.

Strong C#/.NET and Windows engineering experience. You have built or substantially maintained Windows software beyond basic scripts or web applications. Relevant experience includes services or scheduled tasks, registry and system inventory, operating-system APIs, permissions, packaging, installation, and troubleshooting on customer systems.

Practical backend and cloud capability. You can work confidently with APIs, databases, background jobs, authentication, and cloud deployment. You understand failure handling, retries, idempotency, observability, and how to diagnose problems across multiple components.

Sound engineering judgment. You can work within an existing codebase, identify the highest-value improvements, make defensible tradeoffs, and balance delivery speed with security and maintainability. You know when to simplify, when to investigate, and when to ask for help.

Clear communication and dependable ownership. You make realistic commitments, communicate uncertainty, surface blockers early, and bring recommendations. You are comfortable demonstrating working software and explaining what is complete, what remains, and what risks need attention.

We care more about demonstrated responsibility and results than a particular degree, job title, or number of years.

Particularly relevant experience

Experience developing endpoint-management, vulnerability-management, security, or MSP-focused software is valuable. Relevant backgrounds may include ConnectSecure/CyberCNS, SecPod, Kaseya/RapidFire Tools, ConnectWise, ManageEngine, Wazuh, or similar product companies.

Compensation: Competitive compensation + fully paid health insurance + 401k match + bonus + equity, * 401(k)

• 401(k) matching
• Flexible schedule
• Health insurance
• Paid time off
• Professional development assistance