Software Engineer, Compute and Isolation

Job summary

Responsibilities

Every agent on Baseten Sandboxes gets its own microVM, where it writes and runs code, calls tools, and keeps state across long tasks. Agents pause and resume constantly, so the machine underneath has to start, stop, snapshot, fork, and resume fast, and keep every tenant isolated while it does.

• Own the microVM lifecycle for agent sandboxes: start, stop, suspend, resume, snapshot, and fork
• Build and tune the custom guest kernels sandboxes run on
• Tune host CPU and memory configuration so sandboxes run fast and safely on each type of hardware we operate
• Manage host-level resources and sandbox density on each machine
• Own startup and resume performance end to end, from VM boot or snapshot restore to the first command

What they're looking for

• Hands-on experience with KVM, plus Firecracker, Cloud Hypervisor, or QEMU
• Deep understanding of Linux internals: namespaces, cgroups, memory management, and the boot path
• Experience building cloud infrastructure as the provider (multi-tenant compute that customers run on), not only running workloads on a cloud provider
• Experience building multi-tenant infrastructure where isolation is a security boundary
• Strong systems programming background in Rust and/or Go; C/C++ also welcome

Tech stack

• Spark
• Rust
• C++