Senior Linux Isolation & Networking Engineer

Kaseya; Toronto; On-site; CAD 120,000 - 180,000; Full time

Job summary

Kaseya is hiring a Senior Systems Engineer to build the process-isolation, sandboxing, and network-interception infrastructure supporting the Kaseya Intelligence Platform. This is a hands-on systems role operating at the Linux, networking, and process boundary rather than the application layer.

You’ll own complex platform components from design through production, helping ensure automation and agentic AI workloads remain isolated, secure, observable, and reliable in multi‑tenant environments.

Qualifications

• 5+ years of systems engineering or software engineering experience building production infrastructure, runtime, or platform services.
• Experience developing production systems using Go, Rust, C, or C++.
• Experience working with Linux internals, including namespaces, cgroups, netfilter or iptables, sockets, and process lifecycle management.
• Experience implementing or operating at least one sandboxing or workload-isolation technology, such as gVisor, Firecracker, WebAssembly, containers, or micro virtual machines.
• Experience building networking systems involving TCP/IP, transparent proxying, or TLS termination and origination.

Responsibilities

• Design, build, and operate a per-workload sidecar proxy that intercepts outbound API traffic and applies authentication, credential, compliance, and audit controls.
• Implement process-isolation controls using Linux namespaces, cgroups, separate user identities, ptrace restrictions, protected memory, and secure credential cleanup.
• Evaluate and implement language-independent sandboxing approaches using gVisor, Firecracker, WebAssembly runtimes, micro virtual machines, or Unix domain sockets.
• Build infrastructure that enforces workload and customer boundaries across isolated execution environments and Temporal namespaces.
• Integrate workload identity and attestation capabilities using SPIFFE, SPIRE, or similar technologies.
• Implement secure workload startup sequencing, including KMS access, OAuth token preparation, network‑rule installation, and readiness signalling.
• Improve the performance, observability, reliability, and failure recovery of the execution and isolation layers.
• Partner with Platform, Security, and Backend Engineering teams on system design, production troubleshooting, and long-term reliability improvements

Skills

Go

Rust

C/C++

Linux internals

Sandboxing technologies

Networking (TCP/IP)

Tools

gVisor

Firecracker

WebAssembly

Containers

Micro virtual machines

Job description

Kaseya is hiring a Senior Systems Engineer to build the process-isolation, sandboxing, and network-interception infrastructure supporting the Kaseya Intelligence Platform. This is a hands-on systems role operating at the Linux, networking, and process boundary rather than the application layer.

You’ll own complex platform components from design through production, helping ensure automation and agentic AI workloads remain isolated, secure, observable, and reliable in multi‑tenant environments.