Networking Engineer for AI Sandboxes & Private Cloud

Baseten; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Baseten is hiring for an Agent Infra Engineer to design and implement a user-space, VPP-based data plane that securely connects sandboxed agents to Baseten services and the internet.

You will build multi-tenant VPN overlays across regions, expose the network as a programmable API, and optimize latency for agent-to-agent and agent-to-service traffic while enabling secure ingress/egress with TLS. The role emphasizes rapid shipping in a fast-growing cloud platform.

Qualifications

• Experience designing user-space data planes, NFV, or multi-tenant cloud networking.
• Strong knowledge of overlay networking (EVPN, VXLAN, GENEVE).
• Experience with VPP or similar data-plane technologies.
• Ability to ship features in weeks to months, not years.

Responsibilities

• Design and build the user-space, VPP-based data plane that connects microVM sandboxes to each other, Baseten services, and the internet.
• Build multi-tenant virtual private networking and overlays (EVPN, GENEVE, VXLAN) across regions.
• Expose the network as a programmable API that the rest of the platform calls.
• Cut latency and raise connection scale for agent-to-agent and agent-to-service traffic.
• Build routing that sends each request to the nearest region and keeps connections working as sandboxes suspend and resume.
• Build secure ingress and egress for sandboxes, including firewalling, static egress IPs, and custom domains with managed TLS.
• Build L7 proxies for request ingress

Skills

User-space networking

VPP data plane

Multi-tenant VPN

Overlay networks

Tools

VPP

EVPN

GENEVE

VXLAN

TLS

APIs

Job description

Baseten is hiring for an Agent Infra Engineer to design and implement a user-space, VPP-based data plane that securely connects sandboxed agents to Baseten services and the internet.

You will build multi-tenant VPN overlays across regions, expose the network as a programmable API, and optimize latency for agent-to-agent and agent-to-service traffic while enabling secure ingress/egress with TLS. The role emphasizes rapid shipping in a fast-growing cloud platform.