2 months ago
Responsibilities
- Build and operate Go backend services that broker wallet creation, authentication, and signing at scale.
- Develop key-recovery and committee trust-model infrastructure using distributed key generation, secret sharing, and threshold-approval mechanisms.
- Implement trusted-execution-environment workflows for key-material reconstruction, hardware isolation, remote attestation, and enclave operations.
- Build authentication and signing-provider integrations involving passkeys, WebAuthn, OAuth, OTP, sessions, 2FA, scoped credentials, authorization policies, and quorum approvals.
- Write design documentation and decision records, participate in security reviews, work with external auditors, and remediate findings.
- Operate production services on Kubernetes, including observability, alerting, secrets and certificate management, on-call response, sanctions screening, and PII-safe handling.
Requirements
- Experience shipping and operating production services in Go or an adjacent systems language, with willingness to develop deep Go expertise.
- Security-first engineering approach with the ability to reason about threat models, blast radius, key custody, and security-critical code review.
- Working knowledge of applied cryptography, including public-key cryptography, signatures, and key management.
- Experience with distributed systems and API design, including idempotency, failure modes, and service boundaries.
- Operational experience with Kubernetes, observability, and incident response.
- Strong written communication skills for design documents and decision records and comfort working in a collaborative, review-heavy environment.
- Preferred experience with AWS Nitro Enclaves, Intel SGX or TDX, trusted-execution-environment attestation, threshold cryptography, MPC, DKG, FROST, verifiable secret sharing, resharing, account abstraction, ERC-4337, EIP-7702, custody or signing providers, HSMs, YubiKey, PIV, secure elements, security audits, WebAuthn, passkeys, OAuth, OIDC, and the Go crypto ecosystem.
Benefits
- Remote-first global workforce with a New York office; the role cannot be performed in California or Colorado.
- Professional reimbursement program for industry conferences, certifications, and related expenses.
- Medical, dental, and vision coverage in the US and some other countries.
- 401(k) retirement plan with company match for US employees.
- Wellness stipend.
- Home-office setup and ergonomic-equipment program.
Tech Stack
Categories
