What We’re Building

Pickle is the first bespoke personal AI — built inside iMessage, the most natural interface consumers already live in.

You tell Pickle what you need, and it builds a mini-app for you on the fly. A fitness coach, a medication tracker, a quantum physics tutor — whatever you need. Every app shares one continuous memory, so your workout app knows what you ate in your cooking app.

Over time, Pickle understands your personal story more deeply and starts changing your life proactively — by messaging you first.

Pickle

To try it out, join the waitlist at the link above.


The Role

We're looking for a Founding Platform Engineer who can own the entire infrastructure layer of a consumer AI product where every user gets their own isolated computing environment, every piece of data is encrypted end-to-end, and the system is designed so that even we as operators cannot access user data in plaintext.

This isn't a typical infra role. You'll be designing systems where per-user agents run in sandboxed environments, stateful distributed workloads are orchestrated across pods, and an encryption-based security architecture guarantees privacy not by policy, but by design.

At this stage, we need someone who can re-architect the platform for massive scale and lead the migration to Terraform-based infrastructure as code.


Scope & Ownership

<aside>

Per-user agent execution environments

Design and operate sandboxed environments where LLM agents execute shell commands, access filesystems, and interact with user data — with full network isolation, short-lived token management, and resource scaling per user.

</aside>

<aside>

Stateful distributed workloads

Orchestrate real-time iMessage sessions that maintain per-user state across distributed pods. Build and scale multi-stage pipelines (minutes to hours long) triggered by events and schedules — including external service calls, data processing, and storage — all while maintaining end-to-end encryption.

</aside>

<aside>

Encryption-based security architecture

Implement a system where the backend is split in two: a hardware-isolated enclave (Rust) handles all encryption/decryption and LLM calls, while the rest of the backend only ever touches ciphertext. Text search, vector similarity, date filtering, sorting, and exact matching all work identically on encrypted data.

</aside>

<aside>

Infrastructure as Code

Lead the Terraform IaC migration of all existing infrastructure — EKS clusters, node groups, VPC, IAM, and beyond.

</aside>