📋 Description

• Build and operate secure infrastructure for process isolation across multi-tenant environments.
• Develop sidecar proxy capabilities to intercept outbound API traffic and enforce policies.
• Implement Linux-based isolation using namespaces, cgroups, and secure credential handling.
• Evaluate sandboxing tech (gVisor, Firecracker, WebAssembly runtimes) for workloads.
• Design workload boundary mechanisms across many isolated environments.
• Advance workload identity and attestation (SPIFFE/SPIRE).

🎯 Requirements

• Production-grade systems software experience using Go, Rust, C, or C++.
• Strong Linux internals knowledge: namespaces, cgroups, netfilter/iptables, sockets, process
• Hands-on experience with sandboxing/workload isolation tech (gVisor, Firecracker, WebAssembly
• Networking infra experience: TCP/IP, transparent proxies, TLS termination/origination.
• Experience with process isolation, privilege separation, credential handling, and OS security
• Experience with multi-tenant isolation infra; SPIFFE/SPIRE familiarity is a plus.

🎁 Benefits

• Full-time opportunity with advanced Linux, networking, cloud, and security infrastructure.
• Opportunity to work with cutting-edge technologies in a high-growth environment.
• Collaboration across Platform, Security, and Backend Engineering teams.
• Professional growth opportunities in systems engineering, cloud infrastructure, and cybersecurity.
• Inclusive workplace committed to equal employment opportunity and diversity.