Job Description & Details
This is a heavy-duty infrastructure role focused on building secure, multi-tenant sandbox execution environments for AI agents. If you enjoy tinkering with the Linux kernel, microVMs, and low-level container internals rather than pushing web APIs, this is a rare chance to architect foundational cloud systems from scratch.
What You'll Actually Be Doing
You'll spend your days scaling secure sandbox execution environments and helping transition their platform from an on-prem V2 setup to a robust managed cloud offering. Expect to get your hands dirty with container internals, driving ultra-low latency sandbox startup times while ensuring rock-solid multi-tenant isolation. You'll partner closely with the CTO and core engineering team to balance execution speed, compute cost, and reliability, owning everything from architectural design to production on-call rotations.
The Core Tech Stack
You need absolute mastery of systems languages like Rust, Go, or C/C++—java-heavy enterprise API backgrounds won't cut it here. The absolute linchpin of this stack relies on deep, low-level knowledge of Linux kernel primitives, Docker internals, Kubernetes, Firecracker microVMs, and gVisor isolation mechanisms. They aren't looking for surface-level tool usage; they need someone who truly understands how these layers interact at the bare metal and hypervisor levels to guarantee security and performance.
Interview Expectations
Expect to be grilled on container escape vectors and how you would mitigate them using Firecracker or gVisor isolation mechanisms. The hiring manager will likely ask you to whiteboard a low-latency sandbox startup architecture, probing for your deep understanding of Linux kernel primitives and resource overhead tradeoffs. They aren't just looking for the right textbook answer; they want to see how you reason through edge-case resource contention and security boundaries under heavy enterprise load.
Application Advice
Skip the generic cloud architect fluff and tailor your resume to highlight deep, hands-on systems programming and infrastructure work in Rust, Go, or C/C++. Ensure keywords like Firecracker, gVisor, Kubernetes architecture, and Linux kernel primitives are front and center to clear the ATS. If you have an active GitHub profile showcasing container or infrastructure commits, link it directly at the top of your resume, as the hiring team heavily values proof of past low-level tinkering.