Platform Engineer: MicroVMs & Multi-Tenant Isolation

Candidate; San Francisco (CA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive compensation

100% medical/dental/vision (US)

Flexible PTO including Winter Break

Parental leave

Fertility stipend via Carrot

401(k)

Exposure to ML startups

Job summary

Baseten is hiring for a senior Agent Infrastructure Engineer who will own the microVM lifecycle for sandboxed agents and lead the tuning of guest kernels and host resources. You will optimize performance and isolation across multi-tenant workloads.

You will work with KVM, Firecracker, and QEMU, contribute to open-source projects, and shape the cloud infrastructure that Baseten builds for AI workloads. This is a hands-on role in SF with rapid iteration.

Qualifications

• Experience with KVM, Firecracker, Cloud Hypervisor, or QEMU.
• Deep understanding of Linux internals: namespaces, cgroups, memory management, and boot path.
• Experience building multi-tenant cloud infrastructure with strong isolation as a security boundary.
• Strong systems programming in Rust and/or Go; C/C++ welcome.

Responsibilities

• Own the microVM lifecycle for agent sandboxes: start, stop, suspend, resume, snapshot, and fork
• Build and tune the custom guest kernels sandboxes run on
• Tune host CPU and memory configuration so sandboxes run fast and safely on each type of hardware we operate
• Manage host-level resources and sandbox density on each machine
• Own startup and resume performance end to end, from VM boot or snapshot restore to the first command
• Own the guest and host side of each sandbox: its identity, how it attaches to storage, and the virtual devices that connect it to the network
• Design isolation for multi-tenant workloads where the hypervisor is the security boundary
• Debug virtualization and isolation issues at scale, from userspace through the kernel to the hardware
• Contribute architecture decisions and code back to the open-source projects we build on

Skills

KVM

Firecracker

Linux internals

Rust

Go

C/C++

Linux kernel

Tools

QEMU

eBPF

perf

ftrace

Job description

Baseten is hiring for a senior Agent Infrastructure Engineer who will own the microVM lifecycle for sandboxed agents and lead the tuning of guest kernels and host resources. You will optimize performance and isolation across multi-tenant workloads.

You will work with KVM, Firecracker, and QEMU, contribute to open-source projects, and shape the cloud infrastructure that Baseten builds for AI workloads. This is a hands-on role in SF with rapid iteration.