Senior Software Engineer (Sandboxes & Virtualization)
Posted Updated
- The Runtime & GPU Systems team builds and operates secure, high-performance environments for multi-tenant Kubernetes platforms at scale. Our team sits at the intersection of container runtimes, lightweight virtualization, GPU infrastructure, and Linux systems engineering
- We partner closely with security, platform, and GPU infrastructure teams to deliver robust, isolated, and efficient execution environments for AI-driven workloads
- As a GPU & Runtime Systems Engineer, you will design, build, and evolve secure sandboxed runtime environments for Kubernetes workloads, focusing on runtime isolation, performance, and security
- You will integrate container runtimes, lightweight VMs, and virtualization technologies to support GPU-accelerated workloads in multi-tenant environments
- Day-to-day, you’ll develop GPU-aware sandboxing and scheduling strategies, optimize containerization and I/O performance for latency-sensitive workloads, and influence architectural decisions across Linux internals, container runtimes, virtualization layers, and GPU drivers
- Design and implement secure execution environments for containerized and virtualized workloads
- Build GPU-aware scheduling, isolation, and resource management strategies for multi-tenant workloads
- Optimize container, VM, and I/O performance across GPU-accelerated workloads
- Conduct profiling, benchmarking, and performance tuning for runtime, virtualization, and GPU stacks
- Contribute to architectural decisions across Linux internals, container runtimes, virtualization layers, and GPU drivers
- Collaborate with security, platform, and infrastructure teams to define and implement runtime isolation and performance standards
- Proficient in systems-oriented programming (Go, C/C++, Rust, Bash) with strong Linux internals knowledge
- Practical experience with lightweight virtualization and sandboxing technologies (e.g., Kata Containers, gVisor, KubeVirt, QEMU)
- Experience supporting GPU-accelerated workloads in multi-tenant environments, including GPU scheduling, isolation, device passthrough, mediated devices, or virtualization
- Skilled at diagnosing and resolving complex performance, reliability, or isolation issues across containers, VMs, and infrastructure
- Strong hands-on experience with Kubernetes, container orchestration, and cloud-native architectures, including controllers, operators, or scheduling extensions
- Experience designing, implementing, or operating secure execution environments (container runtimes, sandboxed workloads, or virtualized systems)
- Experienced in profiling, benchmarking, and tuning performance across runtime, virtualization, and GPU stacks
- 3+ years of experience in systems, platform, infrastructure, or production engineering at scale
- Familiarity with GPU drivers and low-level virtualization or I/O optimization techniques
- Experience building systems for safely executing untrusted or sensitive workloads in shared environments
- Experience defining threat models and implementing runtime security policies in multi-tenant systems
- We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams – even if you aren’t a 100% skill or experience match
- Applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization
- Or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency