Tailscale builds the WireGuard mesh VPN that everyone in tech recommends. The engineering culture is famously thoughtful — long Hacker News threads, deep blog posts, and an interview process that values writing skill almost as much as coding. Hiring is selective and slow.
Process
Recruiter screen → written work sample (yes, really — a small async project, ~2–4 hours) → 60-minute coding pair → 60-minute system design → 60-minute past-project deep dive → 60-minute behavioral. Cycle: 4–6 weeks. Tailscale is one of the few companies where a strong written sample can carry weight.
What they actually ask
- Design a NAT-traversal protocol that works behind symmetric NATs. Interviewers want to see you reason through STUN, UDP hole punching, and why symmetric NATs defeat naive port prediction. Talk through how you detect that a direct path failed and fall back to a relay fast, so the user never notices.
- Design a coordination server (DERP) for WireGuard relays at global scale. Focus on how relays forward encrypted packets without ever seeing plaintext, how a client picks the lowest-latency relay, and what the coordination server stores versus what stays end-to-end. Be ready to discuss regional placement and what happens when a relay goes down.
- Design key rotation and identity for a fleet of devices. Walk through issuing a per-device key, tying it to an identity provider, and revoking a lost laptop without re-keying the whole network. Expect probing on how a node proves who it is and what happens when a key expires mid-session.
- Coding: practical Go, often parsing or networking-flavored. Expect to parse a wire protocol, work with byte buffers, or wire up concurrent connections rather than solve a LeetCode puzzle. Clean error handling and sensible goroutine and channel use read as strong signal here.
- Past-project deep dive: defend technical decisions, especially writeups they can read first. Bring a project where you owned a genuinely hard tradeoff and can explain what you rejected and why. Since they often read your writeup before the call, make it precise — they will push hardest on the decisions you glossed over.
Levels and comp (2026)
- SE II: $180K–$220K total
- Senior SE: $260K–$340K
- Staff: $380K–$500K
- Principal: $540K–$700K
Prep priorities
- Read the Tailscale blog cover to cover — they value people who already engage with their writing
- Be fluent in Go and networking fundamentals (TCP, UDP, NAT, BGP basics)
- Have a strong portfolio of writing — blog posts, RFCs, or engineering writeups
Frequently Asked Questions
Is Tailscale fully remote?
Yes. ~150 employees globally. Quarterly off-sites, otherwise fully distributed.
Why is the interview so slow?
Deliberate. They prioritize fit and depth. Many candidates report excellent feedback even on rejection.
Do I need WireGuard or networking experience?
Helpful but not required. Curiosity and the ability to dive deep matter more.
Similar company guides
Prepping for Tailscale? Put it to work:
