Connect with us

GAMING

Epic’s Linux Anti-Cheat Hire Reopens a 2021 Gap

Epic’s Linux anti-cheat job restages a 2021 Easy Anti-Cheat toggle that never opened Fortnite, because the Linux path is still user-mode.

Published

on

Epic Games posted a Senior Game Security Engineer opening in June 2026 that asks the hire to champion Linux anti-cheat capabilities for Epic. The Anti-Cheat team job is based in Cary, North Carolina, under Epic Online Services, and covers Epic titles plus outside games that license Easy Anti-Cheat. Linux support for that software has been a portal toggle since September 2021, and Fortnite on Linux is still off.

The listing is a real staffing request, not a ship date. It names the gap Epic already claimed to have closed.

Epic Listed a Cary Engineer to Champion Linux Anti-Cheat

The Senior Game Security Engineer role carries requisition R27345 and sits on the same anti-cheat team that sells Easy Anti-Cheat through Epic Online Services. Epic wants someone who can reverse-engineer cheats, talk to outside studios, and work with data analysts on new detection passes, while writing C and C++ in a security shop. The Linux line is not buried in a nice-to-have footnote. It is a duty, and the skills list matches it.

Apply deep knowledge of operating system internals to detect and prevent the latest cheating techniques. Champion Linux anti-cheat capabilities for Epic. Reverse engineer cheats and other malicious software.

Epic Games, Senior Game Security Engineer posting, Cary

The same posting asks for deep knowledge of Linux and Windows OS internals, plus familiarity with development and security practice on both systems, x86-64 reverse engineering, multiplayer game architecture, and code obfuscation. That is kernel-adjacent work. It is not a Proton FAQ rewrite. People circulating the URL into late August still treated it as a Fortnite rumor. The text never names Fortnite, Steam Deck, or SteamOS.

One senior engineer is also a thin bench for a problem that spans two operating systems, a compatibility layer, and every studio that licenses the middleware. The hire can improve the Linux client module, pressure partners to turn it on, or try to make Linux detection look more like Windows. The posting does not say which.

The 2021 Proton Toggle Never Moved Fortnite

Epic already announced the product this job is supposed to champion. On September 23, 2021, Epic Online Services launched Easy Anti-Cheat support for Linux, Mac, and the then-upcoming Steam Deck, including Wine and Proton. Developers who keep native Linux or Mac builds got the same free anti-cheat already offered on Windows. For Windows games running through Proton, Epic said the latest SDK let studios turn Linux on with a few clicks in the Developer Portal.

Valve’s own partner docs still describe that as a manual step. Proton can run Easy Anti-Cheat without a recompile, but a studio has to manually enable support for your build and ship the Linux library. Epic’s current anti-cheat interface guide is more precise: Wine and Proton players use the Linux client module, the game needs SDK 1.14 or greater, and someone has to activate that module. If the Linux module is dark, the Windows kernel driver never loads inside Proton, and the session dies.

Unreal Engine’s account posted the 2021 launch the same day, tying the work to Linux, Mac, and Steam Deck in one note.

THE EAC LINUX TIMELINE

  1. September 23, 2021: Epic Online Services launches Easy Anti-Cheat for native Linux and Mac and for Wine and Proton, with a Developer Portal toggle.
  2. Late 2021: Valve tells partners Proton can run Easy Anti-Cheat without a recompile if the studio enables Linux and ships the module.
  3. December 2023: Epic chief executive Tim Sweeney says Fortnite on Steam Deck waits on tens of millions of users and calls it the Linux problem.
  4. June 2026: Epic posts the Cary job that tells a senior engineer to champion Linux anti-cheat capabilities.
  5. August 13, 2026: Epic staff tell a Discord AMA a native Linux Epic Games Store client is coming soon, though not in the next preview build.
  6. September 10, 2026: Ubisoft removes For Honor from Linux, saying it cannot provide effective protection on that platform.

The 2021 switch did land for studios that wanted it. Plenty of Easy Anti-Cheat games run on SteamOS when the publisher leaves the Linux module on. The titles that define the argument, Fortnite first among them, never took that step. A public Linux anti-cheat compatibility list now tracks 255 games with some form of anti-cheat, and Epic’s own battle royale is still treated as blocked.

Why User-Mode Easy Anti-Cheat Falls Short

Easy Anti-Cheat on Linux is not a missing installer. It is a weaker mode, and that is why so many live-service teams still refuse the Proton path. On Windows the stack includes a loader, a game library, a service, and the EasyAntiCheat.sys kernel driver. The driver can register callbacks on handle creation, then deny or downgrade other processes that try to read the game’s memory. Samuel Tulach, a reverse engineer who has written through that stack, put the Linux result in one line: apart from the most basic sanity checks, EAC does absolutely nothing on Linux, and it is a simple module for server connection and data encryption.

Proton does not implement the Windows kernel. A kernel-mode driver aimed at Windows arrives at Linux as a dead call. The supported path is a user-mode Linux client that runs with the same rights as any other program the player launched. Studios that want Ring 0 style blocking then have a choice that is not really a choice. They can accept weaker client checks, or they can refuse Linux at the operating-system gate.

WHERE EAC RUNS ON EACH OS

Check Windows Linux and Proton
Kernel driver EasyAntiCheat.sys in Ring 0 No kernel driver loads
User-mode client Ships with the game Linux module, studio must activate
Memory handle blocking Kernel callbacks can deny reads User-mode checks only
Who turns it on Normal path for EAC titles Each studio opts in

That table is the job. Championing Linux anti-cheat, with deep internals on both operating systems, means making the right-hand column look less like a courtesy module. It does not mean the 2021 portal grew a new button.

Linux Still Holds 3.90% of Steam

Sweeney already named the commercial test, and he named it after the toggle existed. In December 2023 he was asked why Fortnite still was not playable on Steam Deck.

If we only had a few more programmers. It’s the Linux problem. I love the Steam Deck hardware. Valve has done an amazing job there; I wish they would get to tens of millions of users, at which point it would actually make sense to support it.

Tim Sweeney, CEO, Epic Games, December 2023

Valve’s Steam Hardware Survey for August 2026 put Linux at 3.90%, with Windows at 93.95% and macOS at 2.14%. That is a larger Linux slice than the pre-Deck years, and it is still not the audience Sweeney described. The survey does not publish a headcount next to the percentage, so it cannot be turned into a clean millions figure against his bar. It can be read as a share that has not crossed the line he set.

Fortnite is also a fat cheat target, and Epic has always treated kernel-class client defense as part of that fight. A user-mode Linux module that other studios already distrust is a hard sell on a game that size. The Cary posting reads like a bid to change the quality of that module, or to build something closer to Windows, now that SteamOS boxes are a product category instead of a hobby.

It does not read like Sweeney’s tens of millions arrived. The company is hiring the programmers he said were missing, while the survey share is still in the low single digits.

EA Is Hiring for Proton and Linux Too

Epic is not the only anti-cheat vendor writing Linux into a job ticket and then leaving the big games dark. Electronic Arts staffed the same hole on Javelin, and Ubisoft showed in September how fast a Linux allow-list can snap shut.

THE PARALLEL LINUX ANTI-CHEAT MOVES

  • EA Javelin: An Anti-Cheat Engineer posting in Austin still asks the hire to develop features supporting Javelin operation on Proton and Linux, after an earlier SPEAR listing told the candidate to chart that path.
  • For Honor: On September 10, 2026, Ubisoft removed the game from Linux, saying it cannot provide the effective protection necessary for security on that platform, with a maybe on bringing it back.
  • Steam Machine: Valve’s living-room SteamOS box inherited the Deck’s multiplayer hole, so Fortnite-class titles still fail on the same anti-cheat checks.
  • BattlEye 2021: The other big middleware also went opt-in for Proton around the Deck launch, and a long list of those games still never flipped the switch.

The pattern is the product. Middleware vendors add a Linux checkbox, publishers treat it as optional, and a later security pass can take the checkbox away. A job listing is the cheapest possible signal that a vendor wants the checkbox to mean more. It is also the signal that, years later, it still does not.

Kernel-Level EAC Would Ask Linux Users for a Closed Driver

The crowd that wanted this hire is not of one mind about what success looks like. SteamOS owners want Fortnite and the rest of the blocked live-service list. A lot of desktop Linux players want those games too, and they do not want a closed anti-cheat driver in the kernel, loaded through DKMS or a signed-module chain that starts looking like a rootkit with a publisher’s name on it. Championing Linux anti-cheat can travel either road. The posting’s internals language leans toward the harder one.

Linux has no Microsoft-style gate on who may load kernel code. That is the property players like, and it is the property cheat vendors cite when they say they cannot tell a Steam Deck from a spoofed box. Secure Boot, a signed official kernel, and a locked-down Proton stack could narrow that gap for SteamOS devices. The same stack would split desktop distros into machines that accept a vendor module and machines that do not. That split is a bigger deal than a Cary headcount.

WHAT WE KNOW

  • The posting: Epic asked a senior anti-cheat engineer in Cary to champion Linux capabilities and to know Linux and Windows internals.
  • The 2021 product: Easy Anti-Cheat already offers a Linux client module and a Proton path that each studio must turn on.
  • The Fortnite status: Epic has not enabled that path for Fortnite, and Sweeney tied a Steam Deck port to tens of millions of users.

WHAT IS UNCONFIRMED

  • A kernel module: The listing never says Epic will ship EasyAntiCheat.sys-class code for Linux.
  • A Fortnite date: Nothing in the requisition commits Epic’s own battle royale to SteamOS.
  • A filled seat: The June posting was still being passed around on August 27, 2026; a public hire is not a shipped client.

If Epic only polishes the user-mode module and nags licensees, Linux gaming gets more of the games that were always one portal click away. If Epic tries to put real kernel enforcement on SteamOS, the blocked list might shrink, and a chunk of the Linux audience will refuse to run the result. The job as written can support either ending.

The Store Client Is the Piece Epic Can Ship

The nearer Linux artifact from Epic is not Fortnite. In a Discord AMA on August 13, 2026, Epic staff said a native Linux Epic Games Store client is coming soon, and that it would not be in the next preview build because the work is larger than a launcher binary. Linux and Steam Deck players still use third-party launchers and Proton for that store today. A native client would cut that friction for Unreal and Epic titles that already run. It would not, by itself, turn on a Linux anti-cheat module Epic has kept off Fortnite since 2021.

That pairing is the through-line. Epic can staff a champion, ship a store, and still leave the battle royale on Windows, consoles, and cloud. The 2021 announcement already gave every Easy Anti-Cheat licensee the clicks. The 2026 job gives Epic one more person who is supposed to make those clicks worth pressing. Until a Linux client module ships at a strength studios will accept on a cheat magnet, the blocked list stays the blocked list.

Fortnite remains off Linux. The champion role is how Epic says the 2021 toggle was not the end of the work.

Harry is the editor of Oton Technology, an independent site he owns and edits, covering the part of technology that people actually have to act on. After ten years in journalism, first reporting and then editing, he works from primary material by habit: the advisory rather than the write up of it, the filing rather than the press release, the changelog rather than the launch video. Every figure in an article carries its source and its date, and where a number comes from a vendor or an analyst model rather than a count, he says so plainly instead of letting it stand as established fact. What he leaves out is anything he could not verify himself, which on a beat full of unnamed supply chain claims removes a great deal. That standard applies across all the sections the site publishes for an international audience, from artificial intelligence and security to phones, computers, gaming, crypto and the software businesses depend on. He corrects errors in the open and labels them, because a site that hides its mistakes is asking readers to trust the rest on nothing.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Trending