Software Engineer, Networking (Agent Infra)

Baseten; United States; Remote; USD 180,000 - 260,000; Full time

Job summary

Baseten is hiring for an Agent Infra Engineer to design and implement a user-space, VPP-based data plane that securely connects sandboxed agents to Baseten services and the internet.

You will build multi-tenant VPN overlays across regions, expose the network as a programmable API, and optimize latency for agent-to-agent and agent-to-service traffic while enabling secure ingress/egress with TLS. The role emphasizes rapid shipping in a fast-growing cloud platform.

Qualifications

• Experience designing user-space data planes, NFV, or multi-tenant cloud networking.
• Strong knowledge of overlay networking (EVPN, VXLAN, GENEVE).
• Experience with VPP or similar data-plane technologies.
• Ability to ship features in weeks to months, not years.

Responsibilities

• Design and build the user-space, VPP-based data plane that connects microVM sandboxes to each other, Baseten services, and the internet.
• Build multi-tenant virtual private networking and overlays (EVPN, GENEVE, VXLAN) across regions.
• Expose the network as a programmable API that the rest of the platform calls.
• Cut latency and raise connection scale for agent-to-agent and agent-to-service traffic.
• Build routing that sends each request to the nearest region and keeps connections working as sandboxes suspend and resume.
• Build secure ingress and egress for sandboxes, including firewalling, static egress IPs, and custom domains with managed TLS.
• Build L7 proxies for request ingress

Skills

User-space networking

VPP data plane

Multi-tenant VPN

Overlay networks

Tools

VPP

EVPN

GENEVE

VXLAN

TLS

APIs

Job description

ABOUT BASETENBaseten powers mission-critical inference for the world's most dynamic AI companies, like Cursor, Notion, OpenEvidence, Abridge, Clay, Gamma, and Writer. By uniting applied AI research, flexible infrastructure, and seamless developer tooling, we enable companies operating at the frontier of AI to bring cutting-edge models into production. We're growing quickly and recently raised our $1.5B Series F, led by Altimeter Capital, Conviction Partners, and Spark Capital. Join us and help build the platform engineers turn to ship AI products.

THE ROLE

Every agent on Baseten Sandboxes runs in its own microVM. Agents call models, reach tools and APIs, expose services, and more and more often talk to each other. Networking built into today's cloud providers was not designed for very large numbers of isolated machines that suspend, resume, and exchange data constantly.

The Agent Infra team builds its own networking stack for sandboxes, designed from the start for that scale. It runs in user space, with VPP (FD.io) as its main data plane technology, and is built from virtualized network functions (VNF/NFV): carrier-grade, low-latency packet processing designed for very large numbers of agents. In September 2026, Baseten acquired Blaxel, whose sandboxes, storage, and networking are the foundation for Baseten Sandboxes.

You'll build multi-tenant virtual private networking that connects each customer's agents and services privately and securely, using modern overlay technologies.

We are building a cloud, not just using one. We want engineers who expose the network as a programmable API and write the code, not operators who push router and switch configuration. The team is small and ownership is big: we ship in weeks and months, not multi-year programs. This role is separate from Baseten's GPU-to-GPU networking. Here you'll own how sandboxes connect to each other, to Baseten services, to customer networks, and to the internet.

If you've built user-space data planes, virtualized network functions, or multi-tenant cloud networking and want to design one for agents, we'll love to talk.

EXAMPLE INITIATIVES

• Blaxel is joining Baseten to build the future of agentic infrastructure
• Securing the open frontier with NVIDIA OpenShell and Blaxel sandboxes
• Baseten Sandboxes documentation

RESPONSIBILITIES

• Design and build the user-space, VPP-based data plane that connects microVM sandboxes to each other, to Baseten services, and to the internet
• Build multi-tenant virtual private networking and overlays (for example EVPN, GENEVE, VXLAN) across regions
• Expose the network as a programmable API that the rest of the platform calls
• Cut latency and raise connection scale for agent-to-agent and agent-to-service traffic
• Build routing that sends each request to the nearest region and keeps connections working as sandboxes suspend and resume
• Build secure ingress and egress for sandboxes, including firewalling, static egress IPs, and custom domains with managed TLS
• Build L7 proxies for request ins