> Markdown version of [/jobs/ext/3992575-software-engineer-compute-and-isolation](https://www.wearedevelopers.com/jobs/ext/3992575-software-engineer-compute-and-isolation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Software Engineer, Compute and Isolation - **Company:** Baseten, Inc - **Location:** San Francisco, CA, United States - **Contract:** Permanent contract - **Skills:** C++ (Programming Language), Cloud Computing, Software Debugging, Linux, Memory Management, Hypervisor, Kernel-Based Virtual Machine, Linux Kernel, Quick EMUlator (QEMU), System Programming, Xen Servers, Rust (Programming Language), Bare Metal, Serverless Computing - **Published:** October 28, 2026 - **Apply:** https://startup.jobs/software-engineer-compute-and-isolation-baseten-10591292 ## About the Role * Hands-on experience with KVM, plus Firecracker, Cloud Hypervisor, or QEMU * Deep understanding of Linux internals: namespaces, cgroups, memory management, and the boot path * Experience building cloud infrastructure as the provider (multi-tenant compute that customers run on), not only running workloads on a cloud provider * Experience building multi-tenant infrastructure where isolation is a security boundary * Strong systems programming background in Rust and/or Go; C/C++ also welcome * Experience debugging performance and correctness problems across userspace and kernel boundaries * You move fast and like owning a problem end to end on a small team NICE TO HAVE * Contributions to KVM, Firecracker, Cloud Hypervisor, QEMU, rust-vmm, or the Linux kernel * Experience with Xen * Working knowledge of container runtimes and sandboxing (containerd, runc, gVisor, Kata Containers) * Experience with VM snapshot and restore, fast VM resume, or building and tuning custom Linux kernels * Experience running virtualization on bare metal and tuning for specific CPU and memory architectures * Experience building a sandbox, serverless, or function runtime product * Familiarity with Linux performance tooling such as eBPF, perf, and ftrace ## Description * Own the microVM lifecycle for agent sandboxes: start, stop, suspend, resume, snapshot, and fork * Build and tune the custom guest kernels sandboxes run on * Tune host CPU and memory configuration so sandboxes run fast and safely on each type of hardware we operate * Manage host-level resources and sandbox density on each machine * Own startup and resume performance end to end, from VM boot or snapshot restore to the first command * Own the guest and host side of each sandbox: its identity, how it attaches to storage, and the virtual devices that connect it to the network * Design isolation for multi-tenant workloads where the hypervisor is the security boundary * Debug virtualization and isolation issues at scale, from userspace through the kernel to the hardware * Contribute architecture decisions and code back to the open-source projects we build on