Software Engineer (Golang), Sandbox

Job summary

Responsibilities

AI agents don't run in browsers. They run in sandboxes — and you will build ours.

• Build the isolation layer: microVMs or containers, namespaces, cgroups, seccomp, snapshot and restore.
• Own the security boundary. Customers run code they didn't write and can't fully trust — your systems make that safe.
• Scale to fleets: creation latency, density, and lifecycle management for thousands of concurrent environments.
• Write Go and own the architecture and the hardest implementation decisions.
• Partner with Product Managers to turn frontier research needs into shippable primitives.

What they're looking for

• Deep Linux internals: namespaces, cgroups, seccomp, virtualization — ideally microVMs of the Firecracker class.
• You have shipped production systems in Go. Not dabbled. Shipped.
• You understand network isolation at the packet level — not just firewall rules.
• Performance instincts: you know what a syscall costs, and you have the profiles to prove you've cared.
• 5+ years building backend or infrastructure systems.

Tech stack

• Go
• Kubernetes