Engineering Tech Lead – vNode

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the vNode technical implementation: Lead the architecture for how vNode integrates with containerd, interacts with the kubelet, and provides safe isolation features. You will establish the standards for what is released, what is postponed, and what requires redesign.

• Delve into container runtimes and isolation: Spearhead the collaboration where vNode interfaces with containerd, Kata Containers, gVisor, runc, and the kernel. You will be the expert who can articulate (and enhance) the processes occurring between a Pod specification and a process executing under a restricted user namespace with a stringent seccomp profile.

• Oversee the kubelet integration interface: Manage how vNode integrates into the node lifecycle, including CRI, kubelet device plugins, cgroups v2, eviction, and the complexities between Kubernetes' node architecture and a runtime that does not rely on a single tenant per node.

• Elevate the engineering standards: Conduct technical design reviews, establish patterns for testing isolation assurances, and mentor the engineers collaborating with you. While you are not a people manager, you are the engineer that the team looks up to.

• Act as Customer Zero for vNode: Test vNode internally against vCluster Platform tenant clusters before it is presented to customers. You will bridge the gap between the needs of AI Cloud operators and the actual performance of vNode in a production environment.

• Represent vNode in external forums: Contribute upstream in significant areas (containerd, runc, Kubernetes SIG-Node), author technical articles explaining the importance of namespace-based isolation, and represent vCluster Labs at KubeCon-class events when appropriate.

⛳️ Requirements

• Extensive experience with container runtimes: You have successfully delivered production work directly with containerd, rather than solely utilizing it via Docker or Kubernetes. Familiarity with Kata Containers, gVisor, or another sandboxed/isolated runtime is considered a strong advantage.

• In-depth knowledge of Kubernetes at the node level: You have experience working with the kubelet, the CRI layer, or a node-resident agent. You understand the functions of cgroups v2, OCI hooks, and the kubelet's PLEG, as well as their potential issues.

• Proficiency in Go systems programming: You write production-quality Go for systems-level applications (syscalls, namespaces, file descriptors, process lifecycle), beyond just service handlers.

• Expertise in Linux isolation: User namespaces, seccomp-bpf, capabilities, and Landlock are not just theoretical concepts; you have implemented them and can analyze their failure scenarios.

• Instincts of a Tech Lead: You guide technical direction by drafting the design document, prototyping challenging components, and leading the team forward. You elevate standards without becoming a bottleneck.

🏝️ Benefits

• Competitive Salary: We provide a competitive compensation package that includes equity.

• Platinum-Level Insurance: Comprehensive health, dental, vision, and life insurance plans, covering you and eligible dependents (benefits may vary by country).

• Flexible Working Schedule: Have a doctor's appointment or need to run errands at 2pm? We understand and accommodate that. We prioritize results over rigid clock-in and clock-out times.

• Workplace Flexibility: We support flexible work arrangements. We recognize that life circumstances can change, and we are willing to adapt your work environment accordingly.