Software Engineer, Compute and Isolation

📋 Description

• Own the microVM lifecycle for agent sandboxes: start, stop, suspend, resume, snapshot, and fork
• Build and tune the custom guest kernels sandboxes run on
• Tune host CPU and memory configuration so sandboxes run fast and safely on each type of hardware we
• Manage host-level resources and sandbox density on each machine
• Own startup and resume performance end to end, from VM boot or snapshot restore to the first command
• Own the guest and host side of each sandbox: its identity, how it attaches to storage, and the

🎯 Requirements

• Hands-on experience with KVM, plus Firecracker, Cloud Hypervisor, or QEMU
• Deep understanding of Linux internals: namespaces, cgroups, memory management, and the boot path
• Experience building cloud infrastructure as the provider (multi-tenant compute that customers run
• Experience building multi-tenant infrastructure where isolation is a security boundary
• Strong systems programming background in Rust and/or Go; C/C++ also welcome
• Experience debugging performance and correctness problems across userspace and kernel boundaries

🎁 Benefits

• Competitive compensation, including meaningful equity
• (U.S. only) 100% coverage of medical, dental, and vision insurance for employee and dependents
• Flexible PTO policy including company wide Winter Break (our offices are closed from Christmas Eve
• Paid parental leave
• Fertility and family-building stipend through Carrot
• (U.S. only) Company-facilitated 401(k)