Sandboxing Engineer: Fast, Secure AI Compute

United States Digital Space LLC; San Francisco, New York (CA, NY); Hybrid; USD 320,000 - 485,000; Full time

Job summary

United States Digital Space LLC seeks a senior systems engineer to design, build, and operate sandboxing infrastructure for untrusted code and agent workloads at scale. You will optimize startup time, isolation, and performance across kernel, hypervisor, and container runtimes, collaborating with research, product, and security teams.

You will work with cloud providers on hardware features and contribute to standardizing technical practices while mentoring others and sharing knowledge on Linux

Qualifications

• Linux systems programming or kernel development experience.
• Proficient in at least one systems language (Rust/C/C++/Go).
• Knowledge of virtualization/container isolation tech (KVM/QEMU/Firecracker/gVisor/runc).
• Understanding Linux namespaces, cgroups, scheduling, memory management.
• Experience profiling and debugging system-level performance.

Responsibilities

• Design, build, and operate sandboxing infrastructure for untrusted code and agent workloads at scale.
• Improve sandbox startup time, density, and throughput with snapshot/restore and warm pools.
• Strengthen isolation across compute, filesystem, and network with per-session credentials.
• Investigate and fix performance, reliability, and security issues at kernel, hypervisor, and container runtime levels.
• Build monitoring, tracing, and debugging tools to attribute latency and resource use inside sandboxes.
• Collaborate with researchers, product, and security teams to enable safe, fast sandboxing.

Skills

Linux systems programming

Rust

C/C++

Kernel debugging

Performance optimization

Strong communication

Security mindset

Team collaboration

Education

Bachelor's degree

Tools

KVM

QEMU

Firecracker

gVisor

runc

Job description

United States Digital Space LLC seeks a senior systems engineer to design, build, and operate sandboxing infrastructure for untrusted code and agent workloads at scale. You will optimize startup time, isolation, and performance across kernel, hypervisor, and container runtimes, collaborating with research, product, and security teams.

You will work with cloud providers on hardware features and contribute to standardizing technical practices while mentoring others and sharing knowledge on Linux