About us
We're a Y Combinator-backed startup building the AI infrastructure layer for the IT services industry: the platform IT providers use to deliver governed AI to the small businesses they manage, and to build and run AI agents for them on the same rails.
It's a genuine blue-ocean space, no incumbent has built this yet - while demand is already strong and validated, with small businesses paying thousands of dollars per month for AI delivered this way today.
The founder previously built an AI coding platform to 2M+ users. You'd join as the founding engineer at the exact moment the category is forming.
What you'll build
You'll be the first engineering hire, working directly with the founder and owning large parts of the platform architecture. The system has two tightly connected halves:
1. AI access & governance infrastructure (the gateway)
A multi-tenant AI gateway: an Anthropic/OpenAI-compatible API layer that popular AI tools (Claude Code, Codex, Gemini CLI, and others) are pinned to via managed endpoint configuration
Identity binding: every request tied to a real employee identity via Microsoft Entra ID (OIDC/SAML federation), with per-tenant isolation across hundreds of end-client organizations
Usage metering, pooled credit management, and per-tenant billing
Audit logging, policy enforcement, and sensitive-data controls at the request layer
An endpoint agent that deploys and pins tool configurations on managed devices and detects drift
2. Agent runtime & builder infrastructure
A tenant-isolated runtime where AI agents execute with scoped, vaulted credentials and inherit the permissions of the employee or role they act for
A managed MCP (Model Context Protocol) server registry: sanctioned connectors to business systems, scoped per tenant
Agent observability: replayable execution logs, approval workflows for actions, blast-radius controls
The builder layer on top: templates and an authoring flow that lets non-experts assemble agents that are safe by construction
This is real infrastructure work: multi-tenancy, identity, credential security, gateways, and billing, with an AI-native product on top.
What we're looking for
Who you are
5+ years of backend / platform engineering experience
You've shipped something end to end. A side project, indie product, or work project where you personally took it from idea to production and real users: architecture, code, deployment, and operations
Daily user of agentic coding tools (Claude Code, Codex, Cursor, or similar), you build with them, understand how they call models and tools under the hood, and can reason about routing, configuration, and extending them
Comfortable building and owning everything alone, you don't need a team around you to be effective. You can take a problem from design through implementation, deployment, and operations solo, and stay productive without structure, standups, or someone else unblocking you
Comfortable with deep product ambiguity: there is no incumbent to copy in this category. We'll be designing the product and the architecture from first principles, choosing the stack, making design calls no one has made before, shipping fast, and owning outcomes end to end
Technical requirements
Experience building or operating API gateways, proxies, or high-throughput request-routing services, hands-on with Nginx (or comparable reverse proxies), SSL/TLS (certificate management, termination, mutual TLS), and production traffic routing
Strong in at least one of: Python, TypeScript, or Rust, and comfortable across 3–5 programming languages overall
Production experience with a web framework (Django, Next.js, React, or similar)
Solid database experience, production work with a relational database (PostgreSQL preferred, or MySQL/similar): schema design, query performance, and migrations on live systems
Experience with vector databases (pgvector, Pinecone, Qdrant, Weaviate, or similar), embeddings, similarity search, and retrieval pipelines
Strong cloud computing experience (AWS, GCP, or Azure): networking, load balancing, container orchestration, and running production workloads - you've operated real systems, not just deployed demos
Hands-on experience with LLM APIs (Anthropic, OpenAI) and MCP (Model Context Protocol)
Nice to have
Startup experience, you've worked at an early-stage company (or founded one) and know what shipping with a small team under real constraints feels like
Experience building multi-tenant SaaS systems, tenant isolation as an architectural property
Experience with auth and identity: OAuth2 / OIDC / SAML, especially Microsoft Entra ID (Azure AD) integration
Experience with billing/metering systems (usage-based pricing, Stripe, etc.)
Background in security products (DLP, EDR, SASE) or IT management tooling for service providers
Experience with device management / endpoint agents (Intune, RMM tooling)
What we offer
Founding-level equity - meaningful ownership, not a token grant
Competitive salary (discussed openly at the first call, benchmarked for senior/staff-level engineers)
Hybrid work from Lviv - in-person collaboration days plus remote flexibility, with core overlap hours with the founder
Direct work with the founder - no layers, no legacy code, you shape the architecture from day one
A concrete, revenue-backed problem: paying customers and validated demand, not a research project
Hardware/co-working budget and paid time off
