Senior Platform Engineer - Linux Runtime & Container Security
Job Description
[Up to c. £180k Comp Package | Office-Led Working - Likely 4 Days in Office]
Role Overview
We’re representing a global quantitative investment organisation whose research and production systems depend on a substantial Linux-based compute platform. They are hiring a specialist engineer to take ownership of one of the deepest layers of that environment - the runtime boundary between applications, containers and the operating system.
This is a systems-engineering position rather than a conventional DevOps, Kubernetes administration or infrastructure support role. The work centres on how workloads are created, isolated, constrained, observed and secured, with direct involvement in container runtime behaviour and Linux kernel interfaces. The right engineer will spend meaningful time in C++ and/or Go, debugging difficult production behaviour and improving foundational components used widely across the engineering organisation...
Role Snapshot
- Bring 5+ years of production systems programming or comparable low-level engineering experience, with strong C++ and/or Go
- Demonstrate deep Linux knowledge across namespaces, cgroups v1/v2, seccomp-bpf, capabilities, process management, signals, IPC and system-call behaviour
- Engineer and harden the runtime mechanisms responsible for safely executing and isolating containerised workloads across a large production environment
- Work directly with OCI runtime technology such as runc, crun or containerd, including the ability to inspect, understand and modify runtime-level code rather than simply configure containers
- Build systems-facing daemons, command-line tooling and libraries that communicate directly with Linux through syscalls, netlink, io_uring and related interfaces
- Diagnose difficult performance, reliability and security issues using tools such as gdb, perf, strace and eBPF-based observability, including the ability to reason from kernel source where required
- Improve instrumentation and failure handling around low-level platform components so runtime problems can be identified and contained reliably in production
- Hold a Computer Science, Engineering or closely related technical degree, alongside the depth to work independently on complex systems problems
- (Preferred) Experience developing eBPF programs, container networking internals, CNI, veth, netfilter, nftables or the Kubernetes container-runtime interface
- (Preferred) Exposure to vulnerability remediation, security research, memory/runtime optimisation, lock-free programming or performance-sensitive environments such as quantitative finance, telecoms or defence
...
Apply for this role
All fields marked with * are required.