Senior Network Systems Engineer (Go/Rust/C++) - Remote

ContentBuffer; San Francisco (CA); Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Equity

Medical insurance

Flexible PTO

Parental leave

401(k)

Job summary

Baseten is seeking an experienced Software Engineer, Networking (Agent Infra) to design and implement a user-space, VPP-based data plane that connects microVM sandboxes with Baseten services and the internet. You will build multi-tenant overlays across regions, expose the network as a programmable API, and push latency and scalability to the next level.

You’ll work on TLS termination, ingress/egress controls, and L7 proxies while owning sandbox addressing, isolation, and comprehensive

Qualifications

• Production code in Rust, Go, or C/C++.
• Experience with user-space packet processing (DPDK/VPP) or VNF/NFV.
• Experience building multi-tenant networking in production.
• Strong TCP/IP and routing fundamentals.

Responsibilities

• Design and build the user-space, VPP-based data plane connecting microVM sandboxes and Baseten services.
• Develop multi-tenant overlays (EVPN, GENEVE, VXLAN) across regions.
• Expose the network as a programmable API used by the platform.
• Reduce latency and scale agent-to-agent and agent-to-service traffic.
• Build secure ingress/egress, firewalls, and TLS domains.
• Create per-sandbox addressing including IPv6 and network isolation.
• Develop observability for packet paths and end-to-end debugging.
• Collaborate with compute, storage, GPU infra, and datacenter teams.

Skills

Rust/Go/C/C++

Systems programming

TCP/IP routing

Multi-tenant networking

Tools

DPDK

VPP/FD.io

VNF/NFV

Job description

Baseten is seeking an experienced Software Engineer, Networking (Agent Infra) to design and implement a user-space, VPP-based data plane that connects microVM sandboxes with Baseten services and the internet. You will build multi-tenant overlays across regions, expose the network as a programmable API, and push latency and scalability to the next level.

You’ll work on TLS termination, ingress/egress controls, and L7 proxies while owning sandbox addressing, isolation, and comprehensive