Senior Software Engineer, Developer Platform

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Offchain Labs

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2018

₿ Crypto

🌐 Web 3

Crypto • Web 3 • Blockchain Technology

Offchain Labs is a venture-backed company founded at Princeton that specializes in developing blockchain technologies, particularly for scaling the Ethereum network. Known for its groundbreaking Arbitrum technology, Offchain Labs offers a suite of products aimed at enhancing Ethereum's capabilities, including Arbitrum One, Arbitrum Nova, and Arbitrum Orbit. The company also provides tools like Prysm, a leading consensus client for Ethereum, and Stylus, a programming environment for deploying EVM-compatible smart contracts. Offchain Labs focuses on creating innovative and accessible solutions for developers, businesses, and individuals to utilize Ethereum effectively.

📋 Description

• The Developer Platform team builds KMS, the key-management and signing service behind ZeroDev's embedded wallets (smart-account / account-abstraction wallets that app developers drop into their products). It is non-custodial: end users control their keys, and the service orchestrates secure creation, authentication, and signing on top of a third-party signing provider. This is security-critical infrastructure, externally audited, with a high review bar. You will own backend services and the cryptographic recovery and trust-model machinery around them on a small, high-ownership team, and help grow the platform from interactive consumer wallets toward programmatic and automated signing and programmable transaction policy. • Go backend services that broker wallet creation, authentication, and signing at scale. • Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non-custodial, with recovery authority split across independent committees so no single party ever holds a user's key. • Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation. • Authentication and signing-provider integration: the user-facing auth methods that gate signing (passkeys / WebAuthn, OAuth, OTP, sessions, 2FA), and integrating with a third-party signing provider (authorization and policy flows, scoped credentials, quorum / consensus approvals). • Security review and hardening: writing design docs and decision records, working directly with external security auditors, and turning a high review bar into shipped code. • Production operations on Kubernetes: observability and alerting, secrets and certificate management, on-call, and the compliance controls the domain requires (sanctions screening, PII-safe handling)

🎯 Requirements

• A strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language and is eager to go deep in Go) • Security-first by default: you reason about threat models, blast radius, and key custody as a habit, and you write code that holds up to security-critical review • Comfortable with applied-cryptography fundamentals (public-key crypto, signatures, key management). You do not need to be a cryptographer, but you can reason about it and learn fast • Solid on distributed systems and API design: idempotency, failure modes, and clean service boundaries • Operationally mature: Kubernetes, observability, and incident response are not foreign to you • Clear written communicator (design docs, decision records) who thrives in a collaborative, review-heavy culture • Nice-to-have • TEE experience (AWS Nitro Enclaves, Intel SGX / TDX, or similar): attestation, enclave key handling, reproducible enclave builds • Threshold cryptography / MPC in practice: DKG, FROST or other threshold signatures, verifiable secret sharing, resharing • Account abstraction: ERC-4337, EIP-7702, smart-account or embedded / non-custodial wallet experience • Built on or integrated a custody / signing provider (Turnkey, Fireblocks, or similar), or built one • HSM / YubiKey / PIV / secure-element integration • Been on the receiving end of a third-party security audit and driven the remediation • WebAuthn / passkeys, OAuth / OIDC, and the Go crypto ecosystem

🏖️ Benefits

• Remote-first global workforce + NY office • Annual company offsite + team onsites • Professional reimbursement program (facilitates industry conference attendance, certifications, and more) • Medical, dental & vision coverage (US + some other countries) • 401k retirement plan + company match (US only) • Wellness stipend • Home office set up / ergonomic equipment program