Senior Software Engineer (Sandboxes & Virtualization)

• The team is responsible for building and operating secure, high-performance runtime environments that power multi-tenant Kubernetes platforms at scale
• We sit at the intersection of container runtimes, lightweight virtualization, GPU infrastructure, and Linux systems engineering
• Our mission is to deliver robust, isolated, and efficient execution environments for GPU-accelerated and AI-driven workloads, partnering closely with security, platform, and GPU infrastructure teams to define and implement best-in-class isolation and performance standards
• In this role, you will design, build, and evolve secure sandboxed runtime environments for workloads running on Kubernetes, with a strong emphasis on runtime isolation, performance, and security
• You will develop platforms that integrate container runtimes, lightweight virtual machines, and virtualization technologies, while engineering support for GPU-accelerated workloads in multi-tenant environments
• Day-to-day, you’ll design GPU-aware sandboxing and scheduling strategies, optimize containerization and I/O performance for latency-sensitive workloads, and build systems capable of safely executing untrusted or shared GPU workloads
• You’ll also contribute to architectural decisions across Linux internals, container runtimes, virtualization layers, and GPU drivers to ensure long-term scalability and operational excellence
• Proficiency in systems-oriented programming (Go, C/C++, Rust, or Bash) with a strong understanding of Linux internals and operating system behavior
• Strong hands-on experience with Kubernetes, container orchestration, and cloud-native architectures, including building Kubernetes-native components (e.g., controllers, operators, or scheduling extensions)
• Experience building systems for safely executing untrusted or sensitive workloads in shared environments
• Demonstrated experience designing, implementing, or operating secure execution environments such as container runtimes, sandboxed workloads, or virtualized systems
• You’re curious about the intersection of security, virtualization, Kubernetes, and GPU infrastructure
• Experience diagnosing and resolving complex performance, reliability, and isolation issues across containers, virtual machines, and underlying infrastructure
• You’re an expert in reasoning about tradeoffs between isolation, performance, and operability
• Familiarity with GPU drivers and low-level virtualization or I/O optimization techniques
• 3+ years of experience in systems, platform, infrastructure, or production engineering roles building and operating software at scale
• Experience conducting profiling, benchmarking, and performance tuning across runtime, virtualization, and GPU stacks
• We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams - even if you aren’t a 100% skill or experience match. If some of this describes you, we’d love to talk
• You love building high-performance systems that operate reliably under extreme scale and demand
• Experience supporting or optimizing GPU-accelerated workloads in multi-tenant environments, including knowledge of GPU scheduling, isolation, device passthrough, mediated devices, or GPU virtualization concepts
• Experience defining threat models and implementing runtime security policies in multi-tenant systems
• Practical experience with lightweight virtualization and sandboxing technologies (e.g., Kata Containers, gVisor, KubeVirt, QEMU, or similar)

Report this job