Senior Software Engineer (Isolation/Sandboxing)

We are looking for a Senior / Staff Software Engineer with a strong background in systems programming, Linux internals, performance optimization, and workload isolation.

This is not a typical backend, DevOps, SRE, or infrastructure engineering role. We need someone who can work across multiple layers of the system stack, from Linux kernel mechanisms and networking to application-level services and security controls.

The ideal candidate has experience designing, implementing, and optimizing complex systems where security, isolation, and performance are equally important.

We are looking for engineers who have worked on one or more of:

• Linux kernel-adjacent systems

• Sandboxing and isolation platforms

• Container runtimes

• Hypervisors and virtualization

• Cloud infrastructure internals

• Performance engineering

• Operating systems

• Networking infrastructure

• Security-focused systems programming

Examples include engineers who have contributed to:

• gVisor

• Kata Containers

• Firecracker

• containerd

• CRI-O

• KVM-based platforms

• Linux security frameworks

• Large-scale distributed infrastructure

• Building and improving secure workload isolation systems

• Designing and implementing sandboxing mechanisms for user-generated and AI-generated code execution

• Working with Linux security primitives such as: namespaces, cgroups, seccomp, permissions and access controls

• Profiling large distributed systems and identifying bottlenecks

• Improving networking performance and traffic management

• Designing and evolving internal protocols and service communication mechanisms

• Contributing to and debugging system-level services and infrastructure components

• Evaluating and integrating technologies such as: gVisor, KVM, container runtimes, virtualization technologies

• Driving technical projects from architecture and requirements gathering through implementation and production rollout

• 5+ years of industry experience

• Experience building and shipping large-scale, reliable, highly distributed systems

• Systems-level programming experience, especially in C, Go, Rust

• Expertise in L2, L3, and/or L4 networking protocols

• Good understanding of Linux networking and security

• Experience building on top of Linux kernel networking primitives – netfilter, nftables, eBPF, tc, network namespaces, etc

• Experience with large-scale distributed data pipelines, from data structuring to efficient querying to data analysis

• Experience of working with public cloud infrastructure providers (AWS/Azure/Google Cloud)

• Understanding of Kubernetes concepts

• Excellent debugging and optimization skills

• Understanding at the protocol level, including the differences between what the specs say, and what actually happens on the Internet

• Contributions to open source projects is a plus

• Excited by the idea of optimizing complex solutions to general problems

• Attention to detail and ability to solve complex customer problems

• Own solutions end-to-end and driving the design, development, and deployment process

• Able to work across teams and level common, sustainable solutions

Base Salary Range: €100,000.00 - €140,000.00 annual gross base salary. This range reflects the good-faith estimate of the base salary we reasonably expect to pay for this position at the time of posting and upon hire. Final compensation will be determined based on skills, experience, internal equity, and location (where applicable). In addition to base salary, this role may be eligible for equity, and company-sponsored benefits, subject to local eligibility rules.