Infra Engineer, MicroVM Sandbox & Isolation

Baseten; San Francisco (CA); Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Equity

Medical, dental, vision for US

Flexible PTO including Winter Break

Paid parental leave

Fertility stipend

401(k)

Learning opportunities

Job summary

Baseten is hiring for a senior Agent Infra Engineer to own microVM sandboxes, kernels, and host configuration. You will shape isolation policies, scale multi-tenant environments, and contribute to open-source virtualization projects. The role demands deep Linux internals knowledge and strong Rust/Go systems programming skills.

Work on bare-metal, custom Linux kernels, and hardware-aware tuning. If you thrive in a small team with ownership, Baseten offers a fast-paced, impactful environment and

Qualifications

• Hands-on experience with KVM, Firecracker, Cloud Hypervisor, or QEMU.
• Deep understanding of Linux internals: namespaces, cgroups, memory management, boot path.
• Experience building multi-tenant infrastructure with strong isolation.
• Strong systems programming in Rust and/or Go; C/C++ also welcome.

Responsibilities

• Own the microVM lifecycle for agent sandboxes: start, stop, suspend, resume, snapshot, and fork.
• Build and tune the custom guest kernels sandboxes run on.
• Tune host CPU/memory configuration for speed and safety on varied hardware.
• Manage host-level resources and sandbox density on each machine.
• Own startup/resume performance end-to-end from VM boot to first command.
• Design isolation for multi-tenant workloads where the hypervisor is the security boundary.
• Debug virtualization and isolation issues from userspace to hardware.
• Contribute architecture decisions and code back to open-source projects.

Skills

KVM

Firecracker

Cloud Hypervisor

QEMU

Linux internals

Rust

Go

C/C++

Multi-tenant infra

Performance debugging

Tools

containerd

runc

gVisor

Kata Containers

Job description

Baseten is hiring for a senior Agent Infra Engineer to own microVM sandboxes, kernels, and host configuration. You will shape isolation policies, scale multi-tenant environments, and contribute to open-source virtualization projects. The role demands deep Linux internals knowledge and strong Rust/Go systems programming skills.

Work on bare-metal, custom Linux kernels, and hardware-aware tuning. If you thrive in a small team with ownership, Baseten offers a fast-paced, impactful environment and