虚拟化研发工程师（安全沙箱运行时）-基础技术
Core
Design and implement lightweight sandbox systems based on Rust VMM or gVisor to optimize isolation mechanisms for AI Agent execution.
Role type
Senior IC systems engineer (virtualization & sandbox runtime)
Builds
High-performance sandbox runtimes and state recovery solutions for AI Agents
Domain
Cloud infrastructure, virtualization, AI infrastructure
Deliverable
production ML models
Required skills
Rust, C/C++, Linux kernel architecture, VMM development (KVM, QEMU, Firecracker), state recovery (CRIU, VM snapshots), storage optimization (FUSE, EROFS)
Preferred skills
TEE (TDX/SEV) architecture, PVM, open-source contributions (Linux kernel, Rust-vmm, Kata Containers), Android/Windows debugging, AI Agent tool call understanding
Technologies
Rust, gVisor, CRIU, FUSE, EROFS, KVM, Virtio, QEMU, Firecracker, TDX, SEV
Responsibilities
Optimize sandbox startup speed using VM Snapshot or CRIU state recovery; Optimize image loading formats and data loading strategies to reduce disk I/O; Tune resource isolation and scheduling for CPU, memory, and I/O in high-concurrency environments; Evaluate and prototype new technologies like TEE and PVM for AI Agent scenarios.
Seniority
Senior, hands-on IC