- Remote
- Remote
- Full-time · Senior
- 5+ years
Lead platform security engineering, owning kernel, hypervisor, sandbox, and host networking isolation for Fly.io’s global public cloud.
Compensation
We offer competitive equity grants with a long exercise window, health care benefits, flexible vacation time (with a minimum), and hardware and phone allowances.
Responsibilities
- Own syscall filtering, process-level confinement, and network confinement for VMMs
- Design and enforce host network isolation using nftables
- Develop trust model between hosts and control plane
- Patch and maintain the custom host kernel
- Investigate and lead forensic analysis of host incidents
Requirements
- Nice to have: hardware virtualization
- Nice to have: nested virtualization
- Nice to have: bare-metal cloud instances
- Nice to have: customer-hosted virtualization