Worked on the bottlerocket-core-kit repository to implement secure and reliable User Namespace ID remapping for containerd-based pods. Focused on enabling the remap-ids capability within the soci proxy plugin, the work ensured proper UID and GID mapping for user-namespace pods, addressing startup failures related to ID mapping during sandbox initialization. Leveraging DevOps practices and container orchestration expertise, the solution established a stable remapping path and improved sandbox isolation. System configuration skills and TOML were used to declare capabilities and update documentation, reducing sandbox errors and laying the groundwork for enhanced multi-tenant isolation and performance in containerized environments.