Senior Software Engineer, Developer Platform

Stack

Responsibilities

• ▹Go backend services that broker wallet creation, authentication and signing at scale
• ▹Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non-custodial, with recovery authority split across independent committees so no single party ever holds a user's key
• ▹Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation
• ▹Authentication and signing-provider integration: the user-facing auth methods that gate signing (passkeys/WebAuthn, OAuth, OTP, sessions, 2FA) and integrating with a third-party signing provider (authorization and policy flows, scoped credentials, quorum/consensus approvals)
• ▹Security review and hardening: writing design docs and decision records, working directly with external security auditors and turning a high review bar into shipped code
• ▹Production operations on Kubernetes: observability and alerting, secrets and certificate management, on-call and the compliance controls the domain requires (sanctions screening, PII-safe handling)

Requirements

• ▹A strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language and is eager to go deep in Go)
• ▹Security-first by default: you reason about threat models, blast radius and key custody as a habit and write code that holds up to security-critical review
• ▹Comfortable with applied-cryptography fundamentals (public-key crypto, signatures, key management); you do not need to be a cryptographer, but you can reason about it and learn fast
• ▹Solid on distributed systems and API design: idempotency, failure modes and clean service boundaries
• ▹Operationally mature: Kubernetes, observability and incident response are not foreign to you
• ▹Clear written communicator (design docs, decision records) who thrives in a collaborative, review-heavy culture

Nice to have

• ▹TEE experience (AWS Nitro Enclaves, Intel SGX/TDX or similar): attestation, enclave key handling, reproducible enclave builds
• ▹Threshold cryptography/MPC in practice: DKG, FROST or other threshold signatures, verifiable secret sharing, resharing
• ▹Account abstraction: ERC-4337, EIP-7702, smart-account or embedded/non-custodial wallet experience
• ▹Built on or integrated a custody/signing provider (Turnkey, Fireblocks or similar), or built one; HSM/YubiKey/PIV/secure-element integration
• ▹Been on the receiving end of a third-party security audit and driven the remediation
• ▹WebAuthn/passkeys, OAuth/OIDC and the Go crypto ecosystem

Soft skills

What we offer

• ▹Remote-first global workforce and a NY office
• ▹Annual company offsite and team onsites
• ▹Professional reimbursement program (industry conferences, certifications and more)
• ▹Medical, dental and vision coverage (US and some other countries)
• ▹401k retirement plan with company match (US only)
• ▹Wellness stipend
• ▹Home office setup and ergonomic equipment program

About the company

Offchain built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution. The company is backed by $124 million in funding.