Senior Platform Security Engineer — Kernel & Isolation

Fly.io; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Fly.io is seeking a senior Linux kernel security engineer to harden per-workload boundaries, manage host isolation with nftables-like controls, and steer the cadence of kernel patching across our global bare-metal fleet.

You will collaborate across teams, lead investigations into guest escapes and kernel anomalies, and shape trust models between hosts and the control plane in a remote-first culture. Strong written communication and ability to work asynchronously are essential.

Qualifications

• Deep expertise in Linux kernel security and hardening.
• Ability to collaborate across teams and act as senior security expert.
• Strong written communication in asynchronous environments.

Responsibilities

• Harden per-workload boundaries with syscall filtering, network confinement, and violation telemetry.
• Own host network isolation with nftables and health checks.
• Lead kernel patching cadence and live kernel patching for critical fixes.

Skills

Linux kernel

Remote collaboration

Async writing

Security expertise

Tools

KVM

BPF

Seccomp

Job description

Fly.io is seeking a senior Linux kernel security engineer to harden per-workload boundaries, manage host isolation with nftables-like controls, and steer the cadence of kernel patching across our global bare-metal fleet.

You will collaborate across teams, lead investigations into guest escapes and kernel anomalies, and shape trust models between hosts and the control plane in a remote-first culture. Strong written communication and ability to work asynchronously are essential.