Software Engineer (Golang), Sandbox

Overview

Build the isolated, network-controlled sandbox environments that AI agents and reinforcement-learning workloads run in, as part of Mistral's sovereign AI cloud platform.

What you'll do

• Build the isolation layer: microVMs or containers, namespaces, cgroups, seccomp, snapshot and restore.
• Own the security boundary for customers running code they didn't write and can't fully trust.
• Scale to fleets: creation latency, density, and lifecycle management for thousands of concurrent environments.
• Write Go and own the architecture and the hardest implementation decisions.
• Partner with Product Managers to turn frontier research needs into shippable primitives.

What you'll need

• Deep Linux internals: namespaces, cgroups, seccomp, virtualization.
• Shipped production systems in Go.
• Understanding of network isolation at the packet level, not just firewall rules.
• Performance instincts, with profiles to prove you have cared about them.
• 5+ years building backend or infrastructure systems.
• Experience partnering with product, design, and business teams to ship software that reached real users.
• A low-ego, team-first mindset.

Nice to have

• Experience with microVMs of the Firecracker class.

Details

• Location: Paris.