SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mistral is building a sovereign AI cloud for Europe, providing full-stack AI solutions from frontier models to developer tools and compute infrastructure. The Cloud Platform team is responsible for the systems that enable customers in finance, healthcare, and the public sector to run frontier models on European-jurisdiction infrastructure, including compute orchestration, Kubernetes, bare metal, storage, networking, and datacenter fleet management.
In this role, you will build the sandbox infrastructure layer that powers AI agents and reinforcement-learning workloads. The challenge is creating secure, isolated, network-controlled environments with snapshotting primitives that can scale to thousands of concurrent environments while maintaining airtight isolation at low latency. RL training runs require thousands of environments created and destroyed every second; agents need to feel fast while remaining completely sandboxed from the world.
Your responsibilities include:
- Designing and implementing the isolation layer using microVMs or containers, namespaces, cgroups, seccomp, and snapshot/restore primitives
- Owning the security boundary—customers run code they didn't write and can't fully trust; your systems make that safe
- Scaling to fleet operations: optimizing creation latency, density, and lifecycle management for thousands of concurrent environments
- Writing production Go code and making the hardest architectural and implementation decisions
- Partnering with Product Managers to translate frontier research needs into shippable primitives
Your customers are the engineers building the next generation of AI software on Mistral's infrastructure; the primitives you ship become the runtime their agents live in.
REQUIREMENTS:
- Deep Linux internals expertise: namespaces, cgroups, seccomp, virtualization (ideally microVMs of the Firecracker class)
- Proven track record shipping production systems in Go (not just experimentation)
- Understanding of network isolation at the packet level, beyond firewall rules
- Performance instincts: knowledge of syscall costs and demonstrated profiling experience
- 5+ years building backend or infrastructure systems
- Experience partnering with product, design, and business teams to ship software that reached real users
- Low-ego, team-first mindset; ability to be a technical force other engineers want to work alongside
