You build the part of Private Agent One that turns a person's intention into completed, inspectable work. Inspectable is the load-bearing word: the person has to be able to see what their agent did and why, which shapes the runtime more than any performance requirement does.
Open for applications. Starts at: First team.
We are taking applications for this role now and building the pipeline for it. The stage above is when the work itself is expected to begin, which is something you deserve to know before you apply rather than after. It is context, not a gate.
Where
In the office together five days a week, in one of our garages, and remote-friendly around your family, arranged one person at a time. We hire across the United States 🇺🇸, India 🇮🇳 and the UAE 🇦🇪.
The work
Implement durable execution, tool calls, background jobs, checkpoints and human approvals. Keep one authoritative identity and policy domain per user while allowing constrained workers. Enforce permissions outside the model and make cancellation, revocation and uncertain external outcomes visible.
The milestone
In your first 90 days, ship a useful workflow that survives interruption, requests approval at the right boundary and explains the actions it completed.
Required
Nice to have
Evidence
Bring strong backend or systems engineering and practical agent experience. Show attention to retries, secret handling and external side effects.
Evidence, not credentials. We are describing work you can point at, in whatever form it exists.
The exercise
Design a workflow where the user revokes permission while an external task is still running, including the limits of recall.
The package
Indicative pay ranges by market and level are on the compensation page. Plan numbers are confirmed in your offer letter.
Apply
One short form. A person reads every application and you hear back either way. You will get your own link to check where things stand, and you can withdraw or delete your application from it at any time, without an account.
