Linux Isolation & Networking Systems Engineer

Kaseya Limited; Toronto; On-site; CAD 160,000 - 240,000; Full time

Benefits offered by this job

Benefits

Sales incentives

Job summary

Kaseya Limited in Toronto, ON is seeking a Systems Engineer to build the Linux isolation, sandboxing, and network-interception infrastructure for the Kaseya Intelligence Platform. This is low‑level engineering at the Linux and networking boundary, not application‑layer development.

You’ll implement workload isolation, protect credentials, and enforce security controls across multi-tenant environments, collaborating with Platform, Security, and Backend teams.

Qualifications

• Production systems software experience in Go, Rust, C, or C++.
• Experience with Linux namespaces, cgroups, netfilter/iptables, sockets, and lifecycle.
• Experience with at least one sandboxing technology (gVisor, Firecracker, WASM, containers, or MicroVMs).
• Experience building networking infrastructure with TCP/IP, TLS termination/origination.
• Experience with process isolation and credential handling.

Responsibilities

• Build and operate a transparent sidecar proxy that intercepts outbound vendor API calls, enforces credential and compliance policies, and records tamper-evident audit events.
• Implement process-isolation controls using Linux namespaces, cgroups, and related mechanisms.
• Evaluate and implement sandboxing approaches with gVisor, Firecracker, WASM, containers, or MicroVMs.
• Design infrastructure enforcing workload and customer boundaries across large numbers of isolated execution environments.
• Evaluate and integrate workload identity and attestation techs such as SPIFFE/SPIRE.
• Implement secure workload startup sequencing including KMS access, token prep, and readiness signaling.
• Improve performance, observability, reliability, and failure recovery of isolation layers.
• Partner with Platform, Security, and Backend teams to define interfaces and deploy improvements.

Skills

Go

Rust

C

C++

Linux internals

Networking

Sandboxing

Security controls

TLS termination

Process isolation

Tools

gVisor

Firecracker

WebAssembly

Containers

MicroVMs

Job description

Kaseya Limited in Toronto, ON is seeking a Systems Engineer to build the Linux isolation, sandboxing, and network-interception infrastructure for the Kaseya Intelligence Platform. This is low‑level engineering at the Linux and networking boundary, not application‑layer development.

You’ll implement workload isolation, protect credentials, and enforce security controls across multi-tenant environments, collaborating with Platform, Security, and Backend teams.