Senior Systems Engineer - Multi-Tenant MicroVM Infra

Baseten; New York (NY); On-site; USD 165,000 - 330,000; Full time

Benefits offered by this job

Meaningful equity

US medical/dental/vision insurance

Flexible PTO including Winter Break

Paid parental leave

Fertility stipend

401(k) (US)

Learning opportunities with ML startu}

Job summary

Baseten is hiring for a senior role focusing on agent sandbox infrastructure. You will own the microVM lifecycle, build custom guest kernels, and optimize host CPU/memory configurations to ensure fast, isolated sandboxes across hardware.

You will drive startup performance end to end, manage resource density, and shape the security model for multi-tenant workloads. The role combines systems programming with open-source contribution.

Qualifications

• Hands-on experience with KVM, plus Firecracker, Cloud Hypervisor, or QEMU.
• Deep understanding of Linux internals: namespaces, cgroups, memory management, and the boot path.
• Experience building cloud infrastructure as the provider (multi-tenant compute that customers run on).
• Experience building multi-tenant infrastructure where isolation is a security boundary.
• Strong systems programming background in Rust and/or Go; C/C++ also welcome.
• Experience debugging performance and correctness problems across userspace and kernel boundaries.
• You move fast and like owning a problem end to end on a small team.

Responsibilities

• Own the microVM lifecycle for agent sandboxes: start, stop, suspend, resume, snapshot, and fork.
• Build and tune the custom guest kernels sandboxes run on.
• Tune host CPU and memory configuration so sandboxes run fast and safely on each type of hardware we operate.
• Manage host-level resources and sandbox density on each machine.
• Own startup and resume performance end to end, from VM boot or snapshot restore to the first command.
• Own the guest and host side of each sandbox: its identity, how it attaches to storage, and the virtual devices that connect it to the network.
• Design isolation for multi-tenant workloads where the hypervisor is the security boundary.
• Debug virtualization and isolation issues at scale, from userspace through the kernel to the hardware.
• Contribute architecture decisions and code back to the open-source projects we build on.

Skills

KVM

Firecracker

Cloud Hypervisor

QEMU

Linux internals

Rust

Go

C/C++

Systems debugging

Multi-tenant infra

Tools

containerd

runc

gVisor

Kata Containers

eBPF

perf

ftrace

Job description

Baseten is hiring for a senior role focusing on agent sandbox infrastructure. You will own the microVM lifecycle, build custom guest kernels, and optimize host CPU/memory configurations to ensure fast, isolated sandboxes across hardware.

You will drive startup performance end to end, manage resource density, and shape the security model for multi-tenant workloads. The role combines systems programming with open-source contribution.