Key skills
BazelKubernetesRemote ExecutionSystems ProgrammingDeveloper InfrastructureToolchain ManagementCompiler InternalsBuilding Test EnvironmentsMentoringPythonGoKotlinShellAIgRPCK8sArgoCDGitOpsCachingCI/CD
About this role
SandboxAQ is a high-growth company delivering AI solutions that address some of the world's greatest challenges. The Cybersecurity Group is seeking a Staff Build Infrastructure Engineer to build the engineering platform for their Cryptographic Posture Management and AI Security Posture Management products, focusing on optimizing software delivery speed, quality, and security.
Responsibilities:
- Architect the Build Plane: Lead the design and implementation of a high-performance, hermetic build system using Bazel. You will optimize the graph for massive concurrency and incremental correctness
- Scale Remote Execution: Design, deploy, and tune a Remote Build Execution (RBE) cluster (e.g., BuildBarn) running on Kubernetes. You will manage the distributed cache and worker pools to handle spikes in compilation demand across thousands of cores
- Engineer Developer Tooling: Write custom CLI tools and IDE plugins that abstract the complexity of the build system. You will create the "Golden Path" that allows product engineers to spin up hermetic test environments with a single command
- Modernize CI/CD: Move beyond brittle shell scripts. You will treat pipelines as software, using GitOps (ArgoCD) to orchestrate testing workflows that are dynamic, testable, and versioned
- Optimize the Inner Loop: Obsessively profile and reduce build latency. You will analyze critical paths, debug cache misses, and write custom Bazel rules to ensure that feedback loops remain under seconds, not minutes
- Drive Technical Culture: Mentor the wider engineering team on monorepo best practices, dependency management, and hermeticity. You will set the standard for how code is built, tested, and released
Requirements:
- 5+ years of Software Engineering experience with a focus on Developer Infrastructure, Build Engineering, or SRE
- Deep expertise in Bazel. You can write custom Starlark rules/macros, debug toolchain hermeticity issues, and explain the difference between input pruning and output caching
- Systems Programming Proficiency (Go/Kotlin/Python). You can write high-performance CLI tools, indexers, or sidecars to augment the build experience
- Experience with Remote Execution. You have operated RBE systems (BuildBarn, EngFlow, or RBE) at scale and understand the underlying gRPC protocols
- Kubernetes Fluency. You understand how to schedule ephemeral build workloads on K8s and have experience with auto-scaling based on queue depth
- Experience migrating legacy codebases (Maven, Gradle, Make) to Bazel
- Contributions to the open-source Bazel ecosystem or rules (e.g., rules_go, rules_docker)
- Experience for toolchain management
- Knowledge of compiler internals and linkers
- Experience building ephemeral test environments