Senior Systems Engineer (Linux Isolation & Networking)Kaseya · Toronto, Ontario

Senior Systems Engineer (Linux Isolation & Networking)

🗓️ Posted 2026-08-27 Toronto, Ontario Hybrid ICT
💰 Salary Not shared 📊 Market 8,333 CAD–12,500 CAD/mo

About the Company

Kaseya is the leading provider of AI-powered IT management and cybersecurity software, serving Managed Service Providers (MSPs) and internal IT organizations worldwide. Our comprehensive platform helps organizations efficiently manage, secure, and automate their IT environments, driving operational efficiency and long-term business success. Backed by Insight Partners, a leading global software investor, Kaseya has experienced sustained double-digit growth and continues to expand its global footprint, supporting customers in more than 20 countries and managing over 15 million endpoints worldwide. Founded in 2000, Kaseya has built a culture centered around innovation, accountability, and results, valuing individuals who are driven, adaptable, and committed to delivering exceptional outcomes for customers and teammates. At Kaseya, success comes from embracing challenges, moving with urgency, and continuously raising the bar.

Responsibilities

  • ● Design, build, and operate a per-workload sidecar proxy that intercepts outbound API traffic and applies authentication, credential, compliance, and audit controls
  • ● Implement process-isolation controls using Linux namespaces, cgroups, separate user identities, ptrace restrictions, protected memory, and secure credential cleanup
  • ● Evaluate and implement language-independent sandboxing approaches using gVisor, Firecracker, WebAssembly runtimes, micro virtual machines, or Unix domain sockets
  • ● Build infrastructure that enforces workload and customer boundaries across isolated execution environments and Temporal namespaces
  • ● Integrate workload identity and attestation capabilities using SPIFFE, SPIRE, or similar technologies
  • ● Implement secure workload startup sequencing, including KMS access, OAuth token preparation, network-rule installation, and readiness signalling
  • ● Improve the performance, observability, reliability, and failure recovery of the execution and isolation layers
  • ● Partner with Platform, Security, a