Formal Verification Engineer
MatX
<p><strong>What MatX Is Building</strong></p> <p>MatX's mission is to make the world's best AI models run as efficiently as allowed by physics, bringing the world years ahead in AI quality and availability. We build the full stack—from silicon and rack design through compilers, kernels, and ML models. We are seeking a Formal Verification Engineer to bring rigorous mathematical guarantees to our hardware and software at every layer of the stack.</p> <p><strong>What You'll Do Here</strong></p> <ul> <li>Apply model checking and formal property verification to RTL blocks, memory subsystems, and interconnects, providing complete coverage wherever possible, using tools such as JasperGold or VC-Formal.</li> <li>Develop and maintain machine-checked proofs for critical compiler transformations, ensuring correctness of lowering passes from our high-level programming model down to hardware</li> <li>Build embeddings of our hardware description languages and simulator models into interactive theorem provers (e.g. Lean 4, Rocq, Isabelle/HOL), and use those embeddings to prove functional correctness and microarchitectural properties directly against the designs</li> <li>Collaborate with architecture, compiler, and silicon verification teams to identify correctness properties worth proving and translate them into tractable proof obligations</li> <li>Drive methodology for integrating formal tools (JasperGold, SymbiYosys, or equivalent) into our existing practices</li> </ul> <p><strong>Who You Are</strong></p> <ul> <li>Hands-on experience with hardware model checking—writing SVA/PSL properties, running bounded or unbounded proofs, and closing out formal verification targets at block or subsystem level</li> <li>Practical experience with at least one interactive theorem prover (Lean, Coq, Isabelle/HOL, Agda, or similar)</li> <li>Experience embedding an existing language or IR into a theorem prover—whether an HDL, compiler IR, ISA, or similar—is a strong plus</li> <li>Experience with compiler correctness proofs or verified compilation (e.g. CompCert-style or translation validation) is a strong plus</li> <li>Comfort working across the hardware/software boundary: you understand both RTL microarchitecture and compiler IR design well enough to find the correctness properties that matter</li> <li>Able to work in a small team where the scope of what you own will be large and shift quickly</li> </ul> <p><strong>Compensation</strong></p> <p>The US base salary for this full-time position is determined based on a variety of factors including role, experience, location, job-related skills, and relevant education and training. Career length is only a guideline for compensation.</p> <ul> <li>Early Career - $120,000 - $212,500 + equity</li> <li>Mid Career - $150,000 - $287,500 + equity</li> <li>Senior Career - $200,000 - $425,000 + equity</li> </ul> <p><strong>What We Offer</strong></p> <ul> <li><strong>A Stake in our success </strong>A flexible cash equity compensation mix that fits your needs</li> <li><strong>Health &amp; Wellness</strong> — Company subsidized health, dental, vision, and life insurance; pre-tax HSA with generous company contribution</li> <li><strong>Time To Recharge</strong> — 4 weeks paid time off (accrued), 12 company holidays, and 3 weeks remote/flexible work per year</li> <li><strong>Support to Parents</strong> — Up to 12 weeks of paid parental leave, regardless of your path to parenthood</li> <li><strong>Learning &amp; Development</strong> — $1,500 yearly tow