Asks for

The ad says“Practical experience with at least one interactive theorem prover (Lean, Coq, Isabelle/HOL, Agda, or similar)”
The ad says“Experience with compiler correctness proofs or verified compilation (e.g. CompCert-style or translation validation) is a strong plus”
The ad says“Comfort working across the hardware/software boundary: you understand both RTL microarchitecture and compiler IR design well enough to find the correctness properties that matter”
The ad says“Practical experience with at least one interactive theorem prover (Lean, Coq, Isabelle/HOL, Agda, or similar)”
The ad says“Apply model checking and formal property verification to RTL blocks, memory subsystems, and interconnects, providing complete coverage wherever possible, using tools such as JasperGold or VC-Formal.”
The ad says“Build embeddings of our hardware description languages and simulator models into interactive theorem provers (e.g. Lean 4, Rocq, Isabelle/HOL), and use those embeddings to prove functional correctness and microarchitectural properties directly against the designs”
The ad says“Build embeddings of our hardware description languages and simulator models into interactive theorem provers (e.g. Lean 4, Rocq, Isabelle/HOL), and use those embeddings to prove functional correctness and microarchitectural properties directly against the designs”
The ad says“Apply model checking and formal property verification to RTL blocks, memory subsystems, and interconnects, providing complete coverage wherever possible, using tools such as JasperGold or VC-Formal.”
The ad says“Practical experience with at least one interactive theorem prover (Lean, Coq, Isabelle/HOL, Agda, or similar)”
The ad says“Build embeddings of our hardware description languages and simulator models into interactive theorem provers (e.g. Lean 4, Rocq, Isabelle/HOL), and use those embeddings to prove functional correctness and microarchitectural properties directly against the designs”
The ad says“Develop and maintain machine-checked proofs for critical compiler transformations, ensuring correctness of lowering passes from our high-level programming model down to hardware”
The ad says“Apply model checking and formal property verification to RTL blocks, memory subsystems, and interconnects, providing complete coverage wherever possible, using tools such as JasperGold or VC-Formal.”
The ad says“Build embeddings of our hardware description languages and simulator models into interactive theorem provers (e.g. Lean 4, Rocq, Isabelle/HOL), and use those embeddings to prove functional correctness and microarchitectural properties directly against the designs”
The ad says“Comfort working across the hardware/software boundary: you understand both RTL microarchitecture and compiler IR design well enough to find the correctness properties that matter”
The ad says“Hands-on experience with hardware model checking—writing SVA/PSL properties, running bounded or unbounded proofs, and closing out formal verification targets at block or subsystem level”
The ad says“Drive methodology for integrating formal tools (JasperGold, SymbiYosys, or equivalent) into our existing practices”
The ad says“Experience with compiler correctness proofs or verified compilation (e.g. CompCert-style or translation validation) is a strong plus”
The ad says“Apply model checking and formal property verification to RTL blocks, memory subsystems, and interconnects, providing complete coverage wherever possible, using tools such as JasperGold or VC-Formal.”

What MatX Is Building

MatX's mission is to make the world's best AI models run as efficiently as allowed by physics, bringing the world years ahead in AI quality and availability. We build the full stack—from silicon and rack design through compilers, kernels, and ML models. We are seeking a Formal Verification Engineer to bring rigorous mathematical guarantees to our hardware and software at every layer of the stack.

What You'll Do Here

Apply model checking and formal property verification to RTL blocks, memory subsystems, and interconnects, providing complete coverage wherever possible, using tools such as JasperGold or VC-Formal.
Develop and maintain machine-checked proofs for critical compiler transformations, ensuring correctness of lowering passes from our high-level programming model down to hardware
Build embeddings of our hardware description languages and simulator models into interactive theorem provers (e.g. Lean 4, Rocq, Isabelle/HOL), and use those embeddings to prove functional correctness and microarchitectural properties directly against the designs
Collaborate with architecture, compiler, and silicon verification teams to identify correctness properties worth proving and translate them into tractable proof obligations
Drive methodology for integrating formal tools (JasperGold, SymbiYosys, or equivalent) into our existing practices

Who You Are

Hands-on experience with hardware model checking—writing SVA/PSL properties, running bounded or unbounded proofs, and closing out formal verification targets at block or subsystem level
Practical experience with at least one interactive theorem prover (Lean, Coq, Isabelle/HOL, Agda, or similar)
Experience embedding an existing language or IR into a theorem prover—whether an HDL, compiler IR, ISA, or similar—is a strong plus
Experience with compiler correctness proofs or verified compilation (e.g. CompCert-style or translation validation) is a strong plus
Comfort working across the hardware/software boundary: you understand both RTL microarchitecture and compiler IR design well enough to find the correctness properties that matter
Able to work in a small team where the scope of what you own will be large and shift quickly

Compensation

The US base salary for this full-time position is determined based on a variety of factors including role, experience, location, job-related skills, and relevant education and training. Career length is only a guideline for compensation.

Early Career - $160,000 - $275,000 + equity
Mid Career - $175,000 - $400,000 + equity
Senior Career - $250,000 - $600,000 + equity

What We Offer

Time off: 4 weeks PTO (accrued) + 12 company Holidays + up to 3 weeks remote work
Health: Company-subsidized Medical (Kaiser or Anthem) for employees & dependents, Guardian Dental and Vision insurances for employee & dependents, and life insurance (employee only), plus HSA and FSA offerings via Lively.
Financial Security: Choose from Roth or pre-tax 401K (or both) with a 5% company contribution (even if you don't contribute), 100% company-paid life insurance (up to $300K), long-term disability and travel insurance.
Professional Development: $1500 per year Professional Development Budget
Team Meals: MatX provides onsite team lunch & dinner Monday - Friday, with your choice of ordering via WeBox, Specialty’s or via our reimbursement system
Commute on Us: We pay 100% for your daily commute. Commute via our company rideshare account, reimburse public transportation, or get a Fasttrak card (or all three)
MatX E[x]tras: $50/mo to use on the perk you value most
Cell & Internet Reimbursement: $35/mo for cellular and $40/mo for wifi
Remote Home Setup: Use our Amazon business account for up to $1000 in office setup purchases.
Mental Wellbeing: 100% paid mental health benefit via SpringHealth and Guardian EAP.
Support to Parents: Up to 12 weeks paid parental leave regardless of path to parenthood, 10 weeks pregnancy disability leave, flexible return-to-work hours, and a $6K Family Fund to cover fertility, surrogacy, adoption, menopausal health, preservation, family counseling and more.

As part of our dedication to the diversity of our team and our focus on creating an inviting and inclusive work experience, MatX is committed to a policy of Equal Employment Opportunity and will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin or ancestry, sex, gender, gender identity, gender expression, sexual orientation, age, physical or mental disability, medical condition, marital/domestic partner status, military and veteran status, genetic information or any other legally recognized protected basis under federal, state or local laws, regulations or ordinances.
---------

This position requires access to information that is subject to U.S. export controls. This offer of employment is contingent upon the applicant's capacity to perform job functions in compliance with U.S. export control laws without obtaining a license from U.S. export control authorities.
--------

MatX does not accept unsolicited resumes from individual recruiters or third-party recruiting agencies in response to job postings. No fee will be paid to third parties who submit unsolicited candidates directly to our hiring managers or People team and any resumes submitted are deemed to be the property of MatX.