SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Cohesity is seeking a Staff Software Engineer with deep expertise in Active Directory internals to design and build the core engine that reads, tracks, and safely writes AD state. This role focuses on powering reliable backup, synchronization, and recovery at scale across enterprise deployments.
You will own the directory engine responsible for discovering, tracking, and safely applying changes to Active Directory objects. Key responsibilities include:
• Design and implement change-tracking pipelines using DirSync, USN cookies, and change notification, with proper cursor persistence, catch-up, and re-sync logic.
• Implement correct object lifecycle handling including tombstones, deleted-object lifetime, and AD Recycle Bin semantics for accurate backup and recovery.
• Guarantee identity continuity across operations: SID, SID history, and GUID preservation and validation across domains and restores.
• Implement safe write paths (modify, ModifyDN, object creation) with idempotency, conflict handling, and integrity guarantees.
• Work with AD-integrated DNS and Group Policy internals to ensure complete, consistent capture and restore.
• Diagnose and resolve complex replication, consistency, and LDAP edge cases in production environments.
This is a deep-systems role requiring someone who understands not just how to administer Active Directory, but how it actually works underneath—how objects replicate, how changes are tracked, how deletions age out, and how identity continuity is preserved across restores.
Cohesity is the leader in AI-powered data security, trusted by over 13,600 enterprise customers including 85+ Fortune 100 companies and nearly 70% of the Global 500. The company was formed from the combination of Cohesity with Veritas' enterprise data protection business and is backed by NVIDIA, IBM, HPE, Cisco, AWS, and Google Cloud.
In-office expectations: Cohesity employees within reasonable commute (45-minute average travel time) work from core offices 2-3 days per week of their choosing. The company strongly prefers candidates currently located in or near Bengaluru, or those committed to relocating prior to start date with legal right to work in India.
REQUIREMENTS:
You should have hands-on, internals-level expertise across most of the following:
• Schema & Replication: AD schema, object classes, and linked-value replication; replication metadata, USN semantics, and consistency reasoning
• Directory Access: LDAP search and controls (including paged and persistent search); DirSync, USN cookies, and change notification for change tracking
• Object Lifecycle: Tombstones, deleted-object lifetime, and AD Recycle Bin behavior
• Identity Continuity: SID, SID history, and GUID continuity semantics across domains and restores
• Group Policy & DNS: Group Policy internals (GPC/GPT and SYSVOL); AD-integrated DNS zones and records
• Safe Writes: Correct and safe modify, ModifyDN, and object-create operations
Nice to have:
• Experience building backup, replication, disaster-recovery, or migration tooling for Active Directory
• Familiarity with Entra ID / Azure AD hybrid environments
• Depth in C/C++, C#, Go; systems-level performance work
• Experience operating against large, multi-domain / multi-forest deployments
