Role Overview

Join Datadog's Compute Nodes team as a Container Runtime Engineer in Boston, Massachusetts, and become a key architect of our global multi-cloud platform's foundational Kubernetes infrastructure. This role sits within the cutting-edge Compute Sandboxing subteam, where you'll own the isolation and execution layer that powers secure multi-tenant execution of untrusted customer code.

Datadog is heavily investing in Kata Containers to deliver enterprise-grade security isolation while exploring innovative sandboxing approaches like gVisor, WebAssembly, and more. You'll directly support our strategic mission to execute customer workloads safely at massive scale across multi-cloud environments. Collaborate with the Job Platform team to unlock new product features while maintaining uncompromising performance.

This is a hands-on engineering role perfect for systems programmers passionate about container security, Linux kernel primitives, and cloud-native infrastructure. Work on the forefront of container runtime technology in Boston's thriving tech ecosystem.

Key Responsibilities at Datadog

• Design, implement, and maintain container isolation infrastructure across multi-cloud Kubernetes environments with primary focus on Kata Containers and microVM technologies
• Achieve performance parity for isolated workloads by resolving disk I/O limitations and optimizing resource utilization
• Develop innovative Kata backends for diverse infrastructure requirements, including potential AWS Nitro Enclaves integration
• Evaluate emerging sandboxing technologies (gVisor, WebAssembly, unikernels) to meet specific workload security and performance requirements
• Collaborate with the upstream Kata Containers project to contribute improvements and influence the technical roadmap
• Serve as the subject matter expert on container security isolation, mentoring engineers on isolation best practices
• Partner with Job Platform team to deliver isolation capabilities enabling exciting new Datadog product features
• Maintain OS and kernel security, GPU infrastructure, and storage solutions for our global platform
• Drive container runtime hardening initiatives to protect multi-tenant customer workloads

Qualifications & Requirements

• Strong systems programming background with 4+ years experience in container runtimes and Linux kernel primitives
• Hands-on experience with container runtime hardening technologies like Kata Containers, gVisor, Firecracker, or similar microVM/sandboxing solutions
• Deep expertise in Kubernetes node infrastructure and multi-cloud environment optimization
• Proven ability to optimize performance of isolated container workloads, particularly disk I/O
• Experience contributing to upstream open source projects in container runtime or security space
• Familiarity with AWS Nitro Enclaves, WebAssembly, unikernels, or other advanced isolation technologies

Bonus points for experience with Datadog's observability platform, GPU infrastructure, or large-scale multi-tenant systems.

Salary & Benefits

Datadog offers competitive compensation for Container Runtime Engineers in Boston, typically ranging from $165,000 - $225,000 base salary plus equity, bonuses, and comprehensive benefits. Our total compensation packages are designed to attract top talent in cloud infrastructure and container security.

• Competitive equity package with significant long-term growth potential
• Comprehensive health insurance covering family members
• Generous commuter benefits and transportation reimbursements
• Fitness and wellness reimbursements
• Professional development stipend for certifications, conferences, and training
• Unlimited PTO and flexible work arrangements
• 401(k) matching program
• Parental leave and family planning benefits

Why Join Datadog?

Datadog is the essential monitoring and security platform for cloud applications, trusted by 20,000+ organizations worldwide. As a Container Runtime Engineer, you'll work on infrastructure that powers our global multi-cloud platform, directly impacting millions of developers and engineering teams.

Our Boston engineering hub puts you at the heart of innovation in container security and cloud-native technologies. Enjoy collaborative teams, direct access to leadership, and the resources to push boundaries in sandboxing technology. Datadog engineers ship code that matters - at massive scale.

We're committed to diversity, inclusion, and building high-performing teams that reflect our global customer base. Join a company consistently named a Best Place to Work with unlimited growth potential.

How to Apply

Ready to shape the future of secure container execution at Datadog? Click Apply Now to submit your application. Include your resume, GitHub/LinkedIn profile, and any relevant open-source contributions (especially Kata Containers or similar projects).

We're hiring quickly for this critical role. Boston-based candidates preferred, but open to exceptional remote talent. Don't miss your chance to work on the cutting edge of container runtime security with Datadog.