Senior Systems Engineer (Linux Isolation & Networking)

📋 Description

• Design, build, and operate per-workload sidecar proxy infrastructure to intercept outbound API
• Implement robust process-isolation using Linux namespaces, cgroups, separate user identities
• Evaluate sandboxing tech (gVisor, Firecracker, WebAssembly runtimes, micro VMs, Unix domain
• Build infrastructure that enforces workload and customer boundaries across isolated environments
• Integrate workload identity and attestation using SPIFFE/SPIRE or equivalent frameworks.
• Own startup sequences: KMS access, OAuth token prep, network-rule installation, readiness

🎯 Requirements

• 5+ years in systems or software engineering building production infrastructure, runtime systems, or
• Strong production development experience with Go, Rust, C, or C++.
• Solid Linux internals knowledge (namespaces, cgroups, netfilter/iptables, sockets, lifecycle).
• Hands-on with sandboxing/workload isolation tech (gVisor, Firecracker, WebAssembly, containers, or
• Experience networking systems: TCP/IP, transparent proxies, TLS termination/origination.
• Strong systems-thinking, cross-functional communication, and reliability focus.

🎁 Benefits

• Fully remote work within Canada.
• Work with advanced systems, cloud, networking, security, and AI infra technologies.
• Flexible, globally distributed remote-friendly environment.
• Flexible paid time off and comprehensive healthcare coverage in Canada.
• Company stock options and professional development budget.
• Office equipment budget, wellness budget, and internet reimbursement.