About Firezone

Firezone secures remote access to networks and applications for organizations of all sizes around the world. We’re building a next-generation, open-source network security platform that leverages new tech like WireGuard and eBPF to provide a run-anywhere firewall for the work-anywhere era.

We’re backed by world-class investors such as Y Combinator, 1984 Ventures, Uncorrelated Ventures, Gaingels, Amino Capital, and many notable angel investors.

Perks

Remote-first work with the option to work locally out of our Mountain View office if you’re in the Bay Area. We attend conferences and hold fun off-sites, so you’ll still get the chance to meet everyone on the team if you work remotely.
Regular team off-sites (our last one was in Santa Rosa, California).
Flexible budget for your ideal workspace setup. Whether it’s a custom-built beefy Linux desktop or an Apple-powered mobile workstation — build your dream battlestation to get your work done! Use whatever gear suits you best.
Comprehensive medical/dental/vision plans.
Flexible work hours and paid vacation.
$100/month stipend to support open source.

About the role

Skills:Rust, TCP/IP, Windows, Distributed Systems

We’re looking for a Windows application engineer to own Firezone's Windows client and drive it to success. This would be a great role for a seasoned application engineer looking to overcome distributed systems challenges at an early-stage security startup. If you thrive on solving low-level packet hacking problems, lie awake at night dreaming of NAT traversal, or obsess over squeezing every last bit of performance from your network stack, this role is ideal for you!

You'll be responsible for architecting, implementing, and testing the Firezone Windows application in Rust usingWireGuard's low-level wintun driver. The ideal candidate will have experience shipping production Windows applications in Rust in addition to familiarity with the Windows kernel network stack.

If you’re not the world's foremost Rust expert, that’s ok! While a certain amount of Rust proficiency is ideal for this role, we value motivation to learn quickly and hack on challenging technical problems above all else.

Key features that make the role unique:

Ship code that runs on thousands of customer's devices worldwide
Overcome connectivity challenges related to blocking of the WireGuard® protocol by nation-states, congested public WiFi, and other hostile networks
Opportunity to "wear many hats": Rapidly level up your skillset across a variety of technologies from cross-platform development to TCP/IP hacking, to hacking on core pieces of the WireGuard protocol, to packet interception and mangling.
Nearly all of your work will be public — our codebase is 100% open source.
Be a founding engineer - you’ll make core architecture choices, shape company culture, and help set the bar for quality and execution.
We're a remote team, but we also value human interaction: we meet regularly for fun offsites, conferences, or hackathons.

Technology

Firezone builds software that companies trust to shuffle packets around quickly and securely. Performance, reliability, and security are key.

Some of the fun, bigger technical challenges we face are:

Scaling WireGuard & eBPF performance to saturate the fastest network links
Scaling firewall configuration management to multisite topologies
Compiling and distributing Erlang applications across many different operating systems and CPU architectures
Building secure, performant native platform apps that integrate well with enterprise MDM systems

To facilitate the above, Firezone is built primarily in Elixir/Phoenix — we think Erlang and OTP provide the perfect foundation for building a secure, scalable distributed networking product (after all, it powers much of the world’s telecom infrastructure!).

The server application is split into three supervised OTP apps: fz_http for orchestration, fz_vpn for VPN termination, and fz_wall for managing the host firewall. We built it this way to support multi-site topologies (fz_vpn, fz_wall) that can be orchestrated by a central control plane (fz_http).

Some of the low-level kernel interfacing and eBPF compilation will be moving to Rust soon along with a cross-platform core client library that will power the client applications for each platform (Apple, Linux, Windows).

See our architecture diagram:

Interview Process

Hiring Process

We value the ability to learn quickly, take ownership, and ship product features over raw years of experience or company logos on your resume. Our goal is to make a well-informed decision based on your ability to do the work you’ll be expected to do at Firezone without subjecting you to a long drawn-out process. Our process involves:

Introduction Call - A chance to connect and see if there is interest from both sides, share more about our vision and roadmap, and learn more about your experience.
Take-home Coding Challenge - We're not fans of live, hours-long coding interviews since they don't resemble how most engineers get work done. Instead, we'll give you a 1-2 hour take-home challenge related to the role. You’ll be solving a problem similar to something you’d face in day-to-day work.
Take-home Followup Call - We’ll hop on a call to go through the completed take-home challenge and a few technical Q&A related to the role.
Final call - If we have any additional questions we’ll schedule a short follow up call.
Background and reference checks.
Offer Decision

Firezone remote jobs

Senior Rust Engineer (Systems)

Rust Engineer (Windows)