4 months ago
Responsibilities
- Build and operate Go backend services that broker wallet creation, authentication, and signing at scale.
- Develop key-recovery and committee trust-model infrastructure using distributed key generation, secret sharing, and threshold-approval mechanisms.
- Implement trusted-execution-environment workflows for key-material reconstruction, hardware isolation, remote attestation, and enclave operations.
- Build authentication and signing-provider integrations involving passkeys, WebAuthn, OAuth, OTP, sessions, 2FA, scoped credentials, authorization policies, and quorum approvals.
- Write design documentation and decision records, participate in security reviews, work with external auditors, and remediate findings.
- Operate production services on Kubernetes, including observability, alerting, secrets and certificate management, on-call response, sanctions screening, and PII-safe handling.
Requirements
- Experience shipping and operating production services in Go or an adjacent systems language, with willingness to develop deep Go expertise.
- Security-first engineering approach with the ability to reason about threat models, blast radius, key custody, and security-critical code review.
- Working knowledge of applied cryptography, including public-key cryptography, signatures, and key management.
- Experience with distributed systems and API design, including idempotency, failure modes, and service boundaries.
- Operational experience with Kubernetes, observability, and incident response.
- Strong written communication skills for design documents and decision records and comfort working in a collaborative, review-heavy environment.
- Preferred experience with AWS Nitro Enclaves, Intel SGX or TDX, trusted-execution-environment attestation, threshold cryptography, MPC, DKG, FROST, verifiable secret sharing, resharing, account abstraction, ERC-4337, EIP-7702, custody or signing providers, HSMs, YubiKey, PIV, secure elements, security audits, WebAuthn, passkeys, OAuth, OIDC, and the Go crypto ecosystem.
Benefits
- Remote-first global workforce with a New York office; the role cannot be performed in California or Colorado.
- Professional reimbursement program for industry conferences, certifications, and related expenses.
- Medical, dental, and vision coverage in the US and some other countries.
- 401(k) retirement plan with company match for US employees.
- Wellness stipend.
- Home-office setup and ergonomic-equipment program.
Tech Stack
Categories
About Offchain
Offchain Labs builds the Arbitrum suite of Ethereum scaling technologies, including the Arbitrum One layer-2 network and tools for launching custom chains used by hundreds of web3 projects. It also maintains the Prysm Ethereum client and offers account abstraction infrastructure through ZeroDev, supporting developers and institutions. Privately held and headquartered in New York, the company was founded in 2018.