Senior Software Engineer, Sandboxes & Virtualization
About this role
Scaling containerized AI workloads securely requires robust isolation and efficient resource management across multi-tenant clusters. The Runtime & GPU Systems team addresses this challenge by building and operating secure, high-performance environments that integrate container runtimes, lightweight virtualization, and GPU infrastructure for Kubernetes platforms.
In this capacity, the engineer designs and evolves sandboxed runtime environments, develops GPU-aware scheduling strategies, and optimizes I/O performance for latency-sensitive workloads. Daily tasks involve profiling the runtime and virtualization stacks, collaborating with security and platform teams, and influencing architectural decisions across Linux internals and GPU drivers.
Ideal candidates bring a strong background in systems or infrastructure engineering at scale, coupled with practical knowledge of container orchestration and lightweight virtualization technologies like Kata Containers or gVisor. Someone who thrives in a fast-moving infrastructure environment and enjoys solving complex isolation problems will succeed here.
What you will do
- Design and implement secure execution environments for containerized and virtualized workloads.
- Build GPU-aware scheduling, isolation, and resource management strategies for multi-tenant workloads.
- Optimize container, virtual machine, and input-output performance across GPU-accelerated workloads.
- Conduct profiling, benchmarking, and performance tuning for runtime, virtualization, and GPU stacks.
- Contribute to architectural decisions across Linux internals, container runtimes, virtualization layers, and GPU drivers.
- Collaborate with security, platform, and infrastructure teams to define and implement runtime isolation and performance standards.
What you need
- Bring three or more years of experience in systems, platform, infrastructure, or production engineering at scale.
- Demonstrate strong hands-on experience with Kubernetes, container orchestration, and cloud-native architectures including controllers, operators, or scheduling extensions.
- Possess experience designing, implementing, or operating secure execution environments such as container runtimes, sandboxed workloads, or virtualized systems.
- Show practical experience with lightweight virtualization and sandboxing technologies like Kata Containers, gVisor, KubeVirt, or QEMU.
- Have experience supporting GPU-accelerated workloads in multi-tenant environments, including GPU scheduling, isolation, device passthrough, mediated devices, or virtualization.
- Demonstrate proficiency in systems-oriented programming languages including Go, C, C++, Rust, or Bash alongside strong Linux internals knowledge.
- Exhibit skill in diagnosing and resolving complex performance, reliability, or isolation issues across containers, virtual machines, and infrastructure.
Nice to have
- Experience building systems for safely executing untrusted or sensitive workloads in shared environments.
- Familiarity with GPU drivers and low-level virtualization or I/O optimization techniques.
- Experience defining threat models and implementing runtime security policies in multi-tenant systems.
Benefits
- Medical, dental, and vision insurance - 100% paid for by CoreWeave
- Company-paid Life Insurance
- Short and long-term disability insurance
- 401(k) with a generous employer match
- Flexible PTO
- Catered lunch each day in our office and data center locations
Skills and tech stack
Questions candidates ask
What is the compensation range for this role?
The base salary range for this role is $182,000 to $242,000. The starting salary is determined based on job-related knowledge, skills, experience, and market location.
What types of technologies and tech stack will I be working with?
The work involves Kubernetes, container runtimes, lightweight virtualization technologies like Kata Containers and gVisor, GPU drivers, and systems-oriented programming languages such as Go, C/C++, Rust, and Bash.
What additional rewards are included besides base salary?
In addition to base salary, the total rewards package includes a discretionary bonus, equity awards, and a comprehensive benefits program based on eligibility.
What team will this engineer join?
The engineer will join the Runtime & GPU Systems team, which builds and operates secure, high-performance environments for multi-tenant Kubernetes platforms at scale.