Lead Cryptography Engineer (MPC & Confidential...

Wells Fargo
Concord, CA, United States
about 1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
1 year minimum
Compensation
$159,000.0 - $305,000.0
Working hours
Regular working hours
Job source

Tech stack

Business Logic Digital Assets Disaster Recovery Distributed Systems Payment Systems Hardware Security Module High-Frequency Trading Key Management Blockchain Software Engineering System Programming Backend
+3 more
Build Management Performance Monitor Golang

Job description

Wells Fargo is seeking a Lead Specialty Software Engineer (Cryptography Engineer) to contribute to a next-generation Digital Asset Platform designed to solve the most critical challenge in institutional finance: achieving strict regulatory compliance without compromising transaction confidentiality. As a Lead Cryptography Engineer you will be responsible for architecting the core Key Management Service (KMS). You will sit at the intersection of applied cryptography, hardware security, and distributed systems, implementing threshold signing protocols inside attested execution environments.

Why Join Us?

  • Work on ā€œHardā€ Problems: You aren’t just calling crypto libraries; you are building a system where code meets hardware to solve fundamental trust problems in digital finance

  • High-Impact Engineering: Your code will secure billions in institutional assets against nation-state level threats and insider attacks

  • Technical Autonomy: You’ll lead architectural decisions for the custody engine, defining how we leverage the latest in MPC and Confidential Computing

Responsibilities:

  • MPC Protocol Implementation: Architect and implement high-performance threshold signature schemes (specifically DKLS23 or similar) for ECDSA key generation and signing

  • Confidential Computing Architecture: Design and build services that run inside Trusted Execution Environments (TEEs) , specifically targeting AMD SEV-SNP and Intel TDX via Confidential Containers (CoCo)

  • Attestation Framework: Implement the RATS (Remote ATtestation procedureS) architecture (RFC 9334) to ensure that no key share is released until the requesting node proves its hardware and software integrity to a Key Broker Service

  • Hardware Security Integration: Design ā€œCold Ceremonyā€ workflows that integrate offline hardware tokens as offline Key Encryption Keys (KEKs) for disaster recovery and deep storage

  • Secure Enclave Development: Write and optimize memory-safe code (Rust/Go) that operates on key material exclusively within encrypted memory regions, ensuring zero leakage to the host OS or hypervisor

  • Policy-to-Cryptography Binding: Design mechanisms to cryptographically bind business logic approvals (e.g., WebAuthn assertions) directly to the MPC signing session, eliminating the gap between ā€œapprovalā€ and ā€œexecutionā€, Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit’s risk appetite and all risk and compliance program requirements.

Requirements

  • 5+ years of Specialty Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

  • 3+ years of experience in backend or systems programming, with expert-level proficiency in Go (Golang)

  • 6+ months of experience with Elliptic Curve Cryptography (ECC)

  • 1+ year of experience withBFT consensus algorithms, P2P networking, and state replication; reliable distributed systems experience

Desired Qualifications:

  • Blockchain Core: Deep experience with Cosmos SDK and CometBFT . Comfort building custom modules and modifying consensus logic, not just deploying smart contracts

  • Pedersen Commitments (Homomorphic encryption properties)

  • Zero-Knowledge Proofs (specifically Bulletproofs or Sigma protocols)

  • Math-to-Code: Demonstrated ability to read academic whitepapers/preprints and translate mathematical specifications into functioning code

  • Experience with MPC (Multi-Party Computation) or Verifiable Secret Sharing (VSS) schemes

  • Familiarity with the Ristretto255 curve or libraries like gnark-crypto

  • Background in FinTech, payment systems, or high-frequency trading platforms

  • Understanding of the Account Model vs. UTXO Model trade-offs in privacy-preserving ledgers

Benefits & conditions

Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs (https://www.wellsfargojobs.com/en/life-at-wells-fargo/benefits) for an overview of the following benefit plans and programs offered to employees.

  • Health benefits

  • 401(k) Plan

  • Paid time off

About the company

Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy (https://www.wellsfargojobs.com/en/wells-fargo-drug-and-alcohol-policy) to learn more.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.juju.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:08 min

Building solutions with open source GoLang infrastructure tools

Jad Wahab Ā· LIVE

2:25 min

Engineering career path from embedded systems to banking

John Woods John Woods Ā· LIVE

1:52 min

Structuring and scaling the backend engineering team

Stefan Lingler Stefan Lingler +1 Ā· Coffee With Developers

4:12 min

Using contract managers for blockchain operations

Soumaya Erradi Ā· LIVE

2:13 min

Moving from financial hype to system engineering problems

John Woods John Woods Ā· WWC 2024

6:16 min

Event-driven Golang backend architecture and cloud deployment

Irina Branovic Irina Branovic Ā· WWC Europe 2026

Videos

See all

Related articles

See all