Anyone, anywhere in the world can apply.
Direct from the employer's own careers page
Who can apply
Read straight from the listing, so you know before you spend time on it.
Anyone, anywhere in the world can apply.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- No home office or equipment budget mentioned.
- Annual retreat
- No company-paid get-togethers mentioned.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As a Platform Security Engineer at Fly.io, you will be responsible for the security boundary between customer micro-VMs and the Fly.io control plane. Your work spans VMMs and jailers, seccomp filters, host networking rules, host identity management, and custom kernels across thousands of bare-metal hosts operating globally.
What you'll do
- Design, harden, and maintain isolation boundaries between customer workloads and platform control systems
- Develop and configure VMMs, jailers, seccomp filters, and host-level networking rules
- Maintain host fleet identity systems and configure custom kernels across bare-metal environments
- Defend cloud infrastructure against emerging threats targeting virtualization and AI workloads
What you bring
- Demonstrated experience in platform security, virtualization, and systems engineering
- Deep working knowledge of Linux kernel internals, seccomp filters, and isolation mechanisms
- Familiarity with hardware virtualization, micro-VM architectures, and hypervisors/VMMs
About Fly.io
Fly.io is a public cloud that converts user containers into hardware-virtualized micro-VMs running on bare-metal hardware globally.
View Fly.io profile & open roles →