Linux Isolation & Networking Systems Engineer

Kaseya; Toronto; On-site; CAD 160,000 - 240,000; Full time

Job summary

Kaseya is hiring a Systems Engineer to build the process-isolation, sandboxing, and network-interception infrastructure for secure workloads across the Kaseya Intelligence Platform. This is low-level Linux, networking, and OS boundary work, not application-layer development.

You will implement language-independent infrastructure to isolate workloads, protect credentials, and enforce security controls across multi-tenant environments, collaborating with Platform, Security, and Backend teams.

Qualifications

• Production systems software experience using Go, Rust, C, or C++.
• Experience with Linux internals: namespaces, cgroups, netfilter/iptables, sockets, and process lifecycle management.
• Experience with at least one sandboxing/workload-isolation technology (gVisor, Firecracker, WebAssembly, containers, or micro VMs).
• Networking infrastructure experience: TCP/IP, transparent proxying, or TLS termination/origination.
• Process isolation, privilege separation, and secure credential handling.

Responsibilities

• Build and operate a transparent sidecar proxy intercepting outbound vendor API calls, enforcing credential/compliance policies, and recording tamper-evident audit events.
• Implement process-isolation controls using Linux users, namespaces, cgroups, ptrace restrictions, protected memory, and credential cleanup.
• Evaluate and implement sandboxing approaches (gVisor, Firecracker, WebAssembly runtimes, or Unix-domain-socket isolation).
• Design infrastructure to enforce workload/customer boundaries across many isolated environments.
• Evaluate and integrate workload identity and attestation technologies (SPIFFE/SPIRE).
• Implement secure workload startup sequencing (KMS access, token prep, network-rule installation, readiness signalling).
• Improve performance, observability, reliability, and failure recovery of execution/isolation layers.
• Partner with Platform, Security, and Backend teams to define interfaces, diagnose production issues, deploy improvements.

Skills

Go

Rust

C

C++

Linux namespaces

cgroups

netfilter/iptables

sockets

Process lifecycle

gVisor

Firecracker

WebAssembly

Containers

MicroVMs

TCP/IP

Transparent proxying

TLS termination

Process isolation

Privilege separation

Credential handling

Tools

Kubernetes

Container-runtime internals

Managed container platforms

Temporal

Job description

Kaseya is hiring a Systems Engineer to build the process-isolation, sandboxing, and network-interception infrastructure for secure workloads across the Kaseya Intelligence Platform. This is low-level Linux, networking, and OS boundary work, not application-layer development.

You will implement language-independent infrastructure to isolate workloads, protect credentials, and enforce security controls across multi-tenant environments, collaborating with Platform, Security, and Backend teams.