Senior Software Engineer (Sandboxes & Virtualization)
CoreWeave
- The team is responsible for building and operating secure, high-performance runtime environments that power multi-tenant Kubernetes platforms at scale
- We sit at the intersection of container runtimes, lightweight virtualization, GPU infrastructure, and Linux systems engineering
- Our mission is to deliver robust, isolated, and efficient execution environments for GPU-accelerated and AI-driven workloads, partnering closely with security, platform, and GPU infrastructure teams to define and implement best-in-class isolation and performance standards
- In this role, you will design, build, and evolve secure sandboxed runtime environments for workloads running on Kubernetes, with a strong emphasis on runtime isolation, performance, and security
- You will develop platforms that integrate container runtimes, lightweight virtual machines, and virtualization technologies, while engineering support for GPU-accelerated workloads in multi-tenant environments
- Day-to-day, you’ll design GPU-aware sandboxing and scheduling strategies, optimize containerization and I/O performance for latency-sensitive workloads, and build systems capable of safely executing untrusted or shared GPU workloads
- You’ll also contribute to architectural decisions across Linux internals, container runtimes, virtualization layers, and GPU drivers to ensure long-term scalability and operational excellence
- Proficiency in systems-oriented programming (Go, C/C++, Rust, or Bash) with a strong understanding of Linux internals and operating system behavior
- Strong hands-on experience with Kubernetes, container orchestration, and cloud-native architectures, including building Kubernetes-native components (e.g., controllers, operators, or scheduling extensions)
- Experience building systems for safely executing untrusted or sensitive workloads in shared environments
- Demonstrated experience designing, implementing, or operating secure execution environments such as container runtimes, sandboxed workloads, or virtualized systems
- You’re curious about the intersection of security, virtualization, Kubernetes, and GPU infrastructure
- Experience diagnosing and resolving complex performance, reliability, and isolation issues across containers, virtual machines, and underlying infrastructure
- You’re an expert in reasoning about tradeoffs between isolation, performance, and operability
- Familiarity with GPU drivers and low-level virtualization or I/O optimization techniques
- 3+ years of experience in systems, platform, infrastructure, or production engineering roles building and operating software at scale
- Experience conducting profiling, benchmarking, and performance tuning across runtime, virtualization, and GPU stacks
- We believe in investing in our people, and value candidates who can bring their own diversified experiences to our teams - even if you aren’t a 100% skill or experience match. If some of this describes you, we’d love to talk
- You love building high-performance systems that operate reliably under extreme scale and demand
- Experience supporting or optimizing GPU-accelerated workloads in multi-tenant environments, including knowledge of GPU scheduling, isolation, device passthrough, mediated devices, or GPU virtualization concepts
- Experience defining threat models and implementing runtime security policies in multi-tenant systems
- Practical experience with lightweight virtualization and sandboxing technologies (e.g., Kata Containers, gVisor, KubeVirt, QEMU, or similar)
Reference: WJ-766_22291133