🛠 Tech Stack

💼 About This Role

You'll lead container runtime architecture for Kubernetes operator isolation at vCluster Labs, defining how vNode replaces microVMs with user-namespace-based isolation. Your core impact is owning technical execution across containerd, kubelet integration, and Linux security primitives. This role partners directly with founding engineers and sets the bar for AI Cloud and regulated enterprise adoption.

🎯 What You'll Do

• Own vNode technical execution and architecture decisions
• Deep-dive on container runtimes (containerd, Kata, gVisor) and isolation primitives
• Ship kubelet integration including CRI, device plugins, cgroups v2
• Run technical design reviews and mentor engineers on the team

📋 Requirements

• Container runtime experience shipping production work against containerd directly
• Kubernetes node-level depth working inside kubelet, CRI layer, or node-resident agent
• Go systems programming for systems-level code (syscalls, namespaces, file descriptors)
• Linux isolation fluency with user namespaces, seccomp-bpf, capabilities, Landlock

✨ Nice to Have

• Upstream contribution history to containerd, runc, Kata, gVisor, or Kubernetes SIG-Node
• Tenant isolation domain expertise with hostile workloads on shared hosts
• Public technical voice via talks, posts, or RFCs on container isolation

🎁 Benefits & Perks

• 💰 Competitive Salary plus equity
• 🏥 Platinum-Level Insurance (health, dental, vision, life)
• ⏰ Flexible Working Schedule
• 🌍 Workplace Flexibility (remote-first)

📨 Hiring Process

Estimated timeline: 2-4 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Technical Interview· 60 min
3. 3Hiring Manager / On-site· 90 min