Software Engineer, Compute and Isolation

Every agent on Baseten Sandboxes gets its own microVM, where it writes and runs code, calls tools, and keeps state across long tasks. Agents pause and resume constantly, so the machine underneath has to start, stop, snapshot, fork, and resume fast, and keep every tenant isolated while it does. General-purpose virtualization was not built for that workload.

The Agent Infra team builds that layer. Sandboxes run in microVMs with custom Linux kernels on bare-metal servers we operate. You'll own how sandboxes start, stop, snapshot, fork, and resume, and how they perform on each host's CPU and memory, down to the hardware. You'll also own the guest and host side of each sandbox: its identity, how it attaches to different storage classes for performance or capabilities, and the virtual devices that connect it securely to the network. In September 2026, Baseten acquired Blaxel https://www.baseten.co/blog/blaxel-is-joining-baseten-to-build-the-future-of-agentic-cloud/, whose microVM sandboxes are the foundation for Baseten Sandboxes https://docs.baseten.co/sandboxes.

We are building a cloud, not just using one. That means designing for many tenants from day one and thinking through what each decision means all the way down to the datacenter. The team is small and ownership is big: we ship in weeks and months, not multi-year programs.

If you've worked deep in KVM and Firecracker, Cloud Hypervisor, or QEMU and want to build the computers AI agents run on, we'd love to talk.

…