Senior Backend Engineer, Developer Platform
The Role:
What you'll work on:
- Go backend services that broker wallet creation, authentication, and signing at scale.
- Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non-custodial, with recovery authority split across independent committees so no single party ever holds a user's key
- Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation
- Authentication and signing-provider integration: the user-facing auth methods that gate signing (passkeys / WebAuthn, OAuth, OTP, sessions, 2FA), and integrating with a third-party signing provider (authorization and policy flows, scoped credentials, quorum / consensus approvals)
- Security review and hardening: writing design docs and decision records, working directly with external security auditors, and turning a high review bar into shipped code
- Production operations on Kubernetes: observability and alerting, secrets and certificate management, on-call, and the compliance controls the domain requires (sanctions screening, PII-safe handling)
Who you are:
- A strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language and is eager to go deep in Go)
- Security-first by default: you reason about threat models, blast radius, and key custody as a habit, and you write code that holds up to security-critical review
- Comfortable with applied-cryptography fundamentals (public-key crypto, signatures, key management). You do not need to be a cryptographer, but you can reason about it and learn fast
- Solid on distributed systems and API design: idempotency, failure modes, and clean service boundaries
- Operationally mature: Kubernetes, observability, and incident response are not foreign to you
- Clear written communicator (design docs, decision records) who thrives in a collaborative, review-heavy culture
- TEE experience (AWS Nitro Enclaves, Intel SGX / TDX, or similar): attestation, enclave key handling, reproducible enclave builds
- Threshold cryptography / MPC in practice: DKG, FROST or other threshold signatures, verifiable secret sharing, resharing
- Account abstraction: ERC-4337, EIP-7702, smart-account or embedded / non-custodial wallet experience
- Built on or integrated a custody / signing provider (Turnkey, Fireblocks, or similar), or built one
- HSM / YubiKey / PIV / secure-element integration
- Been on the receiving end of a third-party security audit and driven the remediation
- WebAuthn / passkeys, OAuth / OIDC, and the Go crypto ecosystem
Perks:
- Remote-first global workforce + NY office
- Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
- Medical, dental & vision coverage (US + some other countries)
- 401k retirement plan + company match (US only)
- Wellness stipend
- Home office set up / ergonomic equipment program
Skills
As published by lever · 3 questions · 2 written answers
Basics
Resume/CV, Full name, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website
Pick from a list (1)
- Applicant Acknowledgment optional
Written answers (2)
- Where did you hear about us?
- Tell us something you're currently passionate about in technology.