Job Description

We are building the trust layer for the agentic future. As AI agents move from simple chatbots to autonomous workloads with access to sensitive enterprise data, the industry lacks a standard for Identity, Authentication, and Governance. This role focuses on the runtime software that protects and governs how AI-agent systems communicate in production. You will work close to application traffic, secure service communication, policy enforcement, and runtime integrations across cloud-native and external environments. The work sits at the intersection of networking, security, and distributed systems. It is a strong fit for someone with deep Go and networking experience who wants to build the software that makes AI-agent execution safer, more controllable, and more production-ready.

What you will do

• Build runtime software that handles secure communication, traffic control, policy enforcement, and service protection for AI-agent systems.
• Work on network-facing components such as application proxies, traffic inspection layers, secure communication libraries, and runtime security services.
• Implement and improve HTTP, TLS, certificate handling, request inspection, authorization integration, and performance-sensitive runtime logic.
• Partner with identity and platform engineers to connect runtime systems with authentication, authorization, audit, and cloud deployment workflows.
• Improve runtime reliability, observability, performance, and operability in production environments.
• Help define how secure runtime controls should work for modern AI-agent systems across internal and external execution environments.
• Support production incidents and continuously improve the safety and supportability of runtime systems.

What you will have

• 8+ years of software engineering experience.
• Strong hands-on experience in Go. Additional fluency in Python, Rust, or C/C++ for systems-level work is a plus.
• Strong understanding of networking fundamentals: HTTP/1.1 and HTTP/2, TLS, certificates, proxies, load balancing, DNS, and service-to-service communication.
• Experience building network-facing or security-sensitive systems such as gateways, proxies, service mesh data planes, traffic filters, SDKs, or runtime security agents.
• Experience with Linux systems, containers, Kubernetes networking (CNI, iptables, eBPF), and cloud-native production environments.
• Good understanding of observability (metrics, tracing, structured logging), debugging, performance tuning, and production support.
• Experience with cloud security, API gateways, service mesh (Envoy, stio, Linkerd), or policy engines (OPA, Cedar) is a strong advantage.

Nice to have

• Experience with SPIFFE/SPIRE Workload API, transparent proxy patterns (iptables, eBPF), async networking frameworks (aiohttp, asyncio, tokio), Envoy filter development, WebAssembly plugins, or protocol-level inspection (gRPC, WebSocket, MCP).

Benefits

• Generous time-off policies
• Top shelf benefits
• Education, wellness and lifestyle benefits

To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered.

#LI-RR1