Today theres more data and users outside the enterprise than inside causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed one that is built in the cloud and follows and protects data wherever it goes so we started Netskope to redefine Cloud Network and Data Security.
Since 2012 we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara St. Louis Bangalore London Paris Melbourne Taipei and Tokyo. Our core values are openness honesty and transparency and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships collaboration and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON) we strive to keep work fun supportive and interactive.Visit us atNetskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
Every agent on this platform runs inside its own isolated environment and someone has to make sure that environment actually behaves the way its supposed to under real load not just in a clean test run. As a Senior Agent Runtime Engineer youll own the health of the systems agents run on: keeping sessions isolated from each other catching the failure modes that only show up under real concurrency and making sure a slow or expensive agent gets caught before it becomes everyones problem. Youll work closely with the engineers building the agents themselves since youre often the first call when something behaves strangely in a real environment but not in a test one. If you like being the person who understands a system well enough to know exactly why its misbehaving this is that job.
Skills and competencies:
Own the health of the agent execution environment day to day session isolation resource limits and catching the failure modes that only appear once real concurrency and real traffic patterns show up not just in a clean test run.
Investigate and resolve cases where an agent behaves differently in production than it did in testing working directly with the Agent Engineer or Quality Engineer who built it to figure out whether the problem is the agents design or the environment its running in.
Tune cold-start and concurrency settings for the platforms critical-path functions and review them on a regular cadence as usage patterns shift rather than setting them once and forgetting them.
Understand the platforms session isolation model well enough to reason about its limits where isolation is guaranteed by the underlying compute layer and where the platform has to add its own controls because that guarantee doesnt fully hold.
Build and maintain the observability that lets someone answer is this agent actually working correctly not just is it technically up tracing behavioral drift detection and quality signals sitting alongside the usual metrics and logs.
Track per-agent and per-session cost and efficiency and flag agents that are burning more tokens calling more tools or running longer than the task should reasonably require.
Deploy and manage runtime-layer infrastructure resources through existing CI/CD pipelines as needed provisioned concurrency settings runtime-specific IAM roles observability configurations etc.
Run and improve the tests that validate isolation actually holds for example confirming that one agents session genuinely cant reach or affect anothers not just assuming it because the platform is supposed to guarantee it.
Must-Have:
At least 5 years in a platform SRE or infrastructure engineering role with real production experience running serverless or containerized workloads on AWS (Lambda Fargate Docker Kubernetes or equivalent) at meaningful scale.
Hands-on experience with AWS observability tooling (CloudWatch X-Ray or a comparable distributed tracing stack) able to go from somethings wrong to a root cause using traces and logs not just dashboards.
Real experience deploying and managing infrastructure through CI/CD independently comfortable owning IaC changes (Terraform CDK or similar) end to end rather than handing them off to someone else.
Working understanding of compute isolation concepts (containers microVMs or similar sandboxing models) and where their guarantees actually stop since a lot of this role is reasoning about the edges of what a platform promises versus what it might not fully cover on its own.
Comfort investigating cost and performance problems at a granular level able to trace an unexpectedly expensive or slow workload back to a specific cause not just flag that costs went up.
Strong incident response instincts: staying calm and methodical while root-causing a live production issue and following through with an actual fix rather than a workaround.
Strong Advantage:
Direct experience with AWS Bedrock SageMaker or any managed AI/agent runtime platform.
Experience with cold-start or concurrency tuning specifically (Lambda provisioned concurrency container warm pools or similar).
Exposure to a security-conscious or regulated environment where infrastructure changes go through a formal review or approval process.
Familiarity with LLM-specific cost drivers (token pricing tool-call volume model tiering) even if it wasnt the primary focus of a past role.
#LI-CV1
Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion race color sex marital or veteran statues age national origin ancestry physical or mental disability medical condition sexual orientation gender identity/expression genetic information pregnancy (including childbirth lactation and related medical conditions) or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.
The application window for this position is expected to close within 50 days. You may apply by filling out the below information or visiting ourNetskope Careers site.
Required Experience:
Unclear Seniority
About NetskopeToday theres more data and users outside the enterprise than inside causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed one that is built in the cloud and follows and protects data wherever it goes so we started Netskope to redefine Cloud Net...
About Netskope
Today theres more data and users outside the enterprise than inside causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed one that is built in the cloud and follows and protects data wherever it goes so we started Netskope to redefine Cloud Network and Data Security.
Since 2012 we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara St. Louis Bangalore London Paris Melbourne Taipei and Tokyo. Our core values are openness honesty and transparency and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships collaboration and teamwork. From catered lunches and office celebrations to employee recognition events and social professional groups such as the Awesome Women of Netskope (AWON) we strive to keep work fun supportive and interactive.Visit us atNetskope Careers. Please follow us on LinkedIn and Twitter@Netskope.
Every agent on this platform runs inside its own isolated environment and someone has to make sure that environment actually behaves the way its supposed to under real load not just in a clean test run. As a Senior Agent Runtime Engineer youll own the health of the systems agents run on: keeping sessions isolated from each other catching the failure modes that only show up under real concurrency and making sure a slow or expensive agent gets caught before it becomes everyones problem. Youll work closely with the engineers building the agents themselves since youre often the first call when something behaves strangely in a real environment but not in a test one. If you like being the person who understands a system well enough to know exactly why its misbehaving this is that job.
Skills and competencies:
Own the health of the agent execution environment day to day session isolation resource limits and catching the failure modes that only appear once real concurrency and real traffic patterns show up not just in a clean test run.
Investigate and resolve cases where an agent behaves differently in production than it did in testing working directly with the Agent Engineer or Quality Engineer who built it to figure out whether the problem is the agents design or the environment its running in.
Tune cold-start and concurrency settings for the platforms critical-path functions and review them on a regular cadence as usage patterns shift rather than setting them once and forgetting them.
Understand the platforms session isolation model well enough to reason about its limits where isolation is guaranteed by the underlying compute layer and where the platform has to add its own controls because that guarantee doesnt fully hold.
Build and maintain the observability that lets someone answer is this agent actually working correctly not just is it technically up tracing behavioral drift detection and quality signals sitting alongside the usual metrics and logs.
Track per-agent and per-session cost and efficiency and flag agents that are burning more tokens calling more tools or running longer than the task should reasonably require.
Deploy and manage runtime-layer infrastructure resources through existing CI/CD pipelines as needed provisioned concurrency settings runtime-specific IAM roles observability configurations etc.
Run and improve the tests that validate isolation actually holds for example confirming that one agents session genuinely cant reach or affect anothers not just assuming it because the platform is supposed to guarantee it.
Must-Have:
At least 5 years in a platform SRE or infrastructure engineering role with real production experience running serverless or containerized workloads on AWS (Lambda Fargate Docker Kubernetes or equivalent) at meaningful scale.
Hands-on experience with AWS observability tooling (CloudWatch X-Ray or a comparable distributed tracing stack) able to go from somethings wrong to a root cause using traces and logs not just dashboards.
Real experience deploying and managing infrastructure through CI/CD independently comfortable owning IaC changes (Terraform CDK or similar) end to end rather than handing them off to someone else.
Working understanding of compute isolation concepts (containers microVMs or similar sandboxing models) and where their guarantees actually stop since a lot of this role is reasoning about the edges of what a platform promises versus what it might not fully cover on its own.
Comfort investigating cost and performance problems at a granular level able to trace an unexpectedly expensive or slow workload back to a specific cause not just flag that costs went up.
Strong incident response instincts: staying calm and methodical while root-causing a live production issue and following through with an actual fix rather than a workaround.
Strong Advantage:
Direct experience with AWS Bedrock SageMaker or any managed AI/agent runtime platform.
Experience with cold-start or concurrency tuning specifically (Lambda provisioned concurrency container warm pools or similar).
Exposure to a security-conscious or regulated environment where infrastructure changes go through a formal review or approval process.
Familiarity with LLM-specific cost drivers (token pricing tool-call volume model tiering) even if it wasnt the primary focus of a past role.
#LI-CV1
Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion race color sex marital or veteran statues age national origin ancestry physical or mental disability medical condition sexual orientation gender identity/expression genetic information pregnancy (including childbirth lactation and related medical conditions) or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.
The application window for this position is expected to close within 50 days. You may apply by filling out the below information or visiting ourNetskope Careers site.
Netskope, a global cybersecurity leader, is redefining cloud, data, and network security to help organizations apply zero trust principles to protect data.
Job Location:
Monthly Salary:
Posted on:
Vacancies:
