Software Engineer - Compute & Isolation

Every agent on Baseten Sandboxes gets its own microVM, where it writes and runs code, calls tools, and keeps state across long tasks. Agents pause and resume constantly, so the machine underneath has to start, stop, snapshot, fork, and resume fast, and keep every tenant isolated while it does. General-purpose virtualization was not built for that workload.

The Agent Infra team builds that layer. Sandboxes run in microVMs with custom Linux kernels on bare-metal servers we operate. You'll own how sandboxes start, stop, snapshot, fork, and resume, and how they perform on each host's CPU and memory, down to the hardware. You'll also own the guest and host side of each sandbox: its identity, how it attaches to different storage classes for performance or capabilities, and the virtual devices that connect it securely to the network.

In September 2026, Baseten acquired Blaxel https://www.baseten.co/blog/blaxel-is-joining-baseten-to-build-the-future-of-agentic-cloud/, whose microVM sandboxes are the foundation for Baseten Sandboxes .