Software Engineer Golang Sandbox

You will build secure, isolated, network-controlled sandbox environments for AI agents and reinforcement-learning workloads. You will develop the isolation layer, own the security boundary, optimize fleet-scale lifecycle performance, write Go, make architecture decisions, and partner with product managers on deployable platform primitives.

Responsibilities

• Build the isolation layer using microVMs or containers, namespaces, cgroups, seccomp, and snapshot and restore capabilities
• Own the security boundary for untrusted customer code
• Scale creation latency, density, and lifecycle management for thousands of concurrent environments
• Write Go and own architecture and complex implementation decisions
• Partner with Product Managers to turn research needs into shippable primitives

Requirements

• Deep knowledge of Linux internals, including namespaces, cgroups, seccomp, and virtualization
• Experience with microVMs such as Firecracker
• Experience shipping production systems in Go
• Knowledge of packet-level network isolation
• Performance profiling expertise
• 5+ years building backend or infrastructure systems
• Experience partnering with product, design, and business teams to ship software for users

Benefits

• Healthcare coverage
• Parental leave
• Retirement plans
• Relocation support
• Wellness programs
• Meal allowances
• Transportation allowances
• Location-specific perks