Software Engineer, Networking (Agent Infra)

LinuxCareers; San Francisco (CA); Presencial; USD 180.000 - 240.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Equity

Full medical/dental/vision

Flexible PTO

Parental leave

Fertility stipend

401(k)

Descripción de la vacante

Baseten is an AI inference platform designing and building a custom networking stack for Baseten Sandboxes where agents run in isolated microVMs and must communicate with each other, Baseten services, and external networks at scale. You will design user-space data planes and multi-tenant overlays to enable secure, high-performance networking across regions.

The role emphasizes Rust/Go/C/C++ systems programming, TCP/IP routing expertise, and experiences in overlay networks and latency

Formación

• Experience with user-space packet processing (DPDK, VPP, or similar) or virtualized network functions (VNF/NFV).
• Production experience building multi-tenant networking (VXLAN, GENEVE, VRF) and software-defined or overlay networks.
• Strong systems programming in Rust, Go, and/or C/C++ with production code ownership.
• Solid grounding in TCP/IP, routing, and experience building cloud networking infrastructure as a provider.
• Experience debugging latency and throughput issues with packet captures, tracing, and profiling.

Responsabilidades

• Design and build user-space, VPP-based data planes that connect microVM sandboxes to each other, Baseten services, and the internet
• Build multi-tenant virtual private networking and overlays (EVPN, GENEVE, VXLAN) across regions with programmable APIs
• Optimize latency and connection scale for agent-to-agent and agent-to-service traffic, including routing for sandbox suspend/resume cycles
• Build secure ingress and egress infrastructure including firewalling, static egress IPs, custom domains with managed TLS, and L7 proxies for inspection and auditing
• Implement per-sandbox addressing, IPv6 support, network isolation, observability for the packet path, and debug production issues end-to-end

Conocimientos

DPDK/VPP

VNF/NFV

Multi-tenant networking

Rust

Go

C/C++

TCP/IP routing

Cloud networking infrastructure

Herramientas

EVPN

VXLAN

GENEVE

VRF

Descripción del empleo

Baseten is an AI inference platform serving companies like Cursor and Notion. This role involves designing and building a custom networking stack for Baseten Sandboxes — a system where agents run in isolated microVMs and need to communicate with each other, services, and external networks at scale using modern overlay technologies and virtualized network functions.

What You'll Do

• Design and build user-space, VPP-based data planes that connect microVM sandboxes to each other, Baseten services, and the internet
• Build multi-tenant virtual private networking and overlays (EVPN, GENEVE, VXLAN) across regions with programmable APIs
• Optimize latency and connection scale for agent-to-agent and agent-to-service traffic, including routing for sandbox suspend/resume cycles
• Build secure ingress and egress infrastructure including firewalling, static egress IPs, custom domains with managed TLS, and L7 proxies for inspection and auditing
• Implement per-sandbox addressing, IPv6 support, network isolation, observability for the packet path, and debug production issues end-to-end

What You Need

• Experience with user-space packet processing (DPDK, VPP, or similar) or virtualized network functions (VNF/NFV)
• Production experience building multi-tenant networking (VXLAN, GENEVE, VRF) and software-defined or overlay networks
• Strong systems programming in Rust, Go, and/or C/C++ with production code ownership
• Solid grounding in TCP/IP, routing, and experience building cloud networking infrastructure as a provider
• Experience debugging latency and throughput issues with packet captures, tracing, and profiling

Nice to Have

• Experience with VPP/FD.io and GENEVE or VXLAN overlays and EVPN
• Linux kernel networking including eBPF/XDP, netfilter or nftables, and network namespaces
• Virtual machine networking familiarity: virtio-net, vhost, TAP devices, Firecracker, or Cloud Hypervisor
• Background in telecom user-plane, 5G core networking, or low-latency trading networks
• Experience with IPv6 at scale, multi-region traffic routing, anycast, BGP, TLS termination, DNS, and egress security controls

Competitive compensation including meaningful equity; 100% coverage of medical, dental, and vision insurance for employee and dependents (U.S. only); flexible PTO policy including company-wide Winter Break; paid parental leave; fertility and family-building stipend through Carrot; company-facilitated 401(k) (U.S. only)