Blockchain - Sr Lead Security Engineer
Role details
Job location
Tech stack
Job description
- Design, architect, and develop a production-grade digital asset custody & wallet orchestration platform by integrating with wallet infra platforms leveraging their APIs and SDKs for wallet provisioning, key management, and transaction orchestration
- Implement secure key management workflows using Multi-Party Computation (MPC) and distributed key generation, ensuring no single point of failure
- Build and configure programmable transaction policy engines, including multi-approval workflows, spending thresholds, velocity limits and role-based access controls
- Develop multi-chain wallet capabilities supporting blockchain networks such as Ethereum, Bitcoin, Solana, and Polygon through unified API abstractions
- Manage the full blockchain transaction lifecycle, including transaction construction, fee estimation, payload signing, broadcast, confirmation tracking, and idempotent retry logic for failed or stuck transactions
- Design event-driven and webhook-based architectures to process real-time blockchain notifications such as transaction confirmations, smart contract events
- Build secure RESTful APIs and microservices that expose wallet functionality to internal consumers, applying OAuth 2.0, JWT-based authentication, API gateway patterns
- Develop and maintain integrations with compliance and risk systems, including transaction monitoring and comprehensive audit trail generation
- Implement robust observability across the wallet service stack, including distributed tracing, structured logging, alerting, and dashboarding using tools such as Datadog, Dynatrace, and Splunk
- Architect the wallet service for high availability, disaster recovery, and horizontal scalability using container orchestration on AWS (EKS/ECS), infrastructure-as-code (Terraform), and cloud-native resilience patterns
- Collaborate with product managers, security teams, and business stakeholders to translate regulatory and business requirements into technical designs and delivery milestones
- Add to team culture of diversity, opportunity, inclusion, and respect
Requirements
- Bachelor''s degree in Computer Science, Software Engineering, or a related field, with 7+ years of software development experience, including at least 2 years working with blockchain technologies or digital asset platforms
- Strong proficiency in Java/J2EE and/or Python, with hands-on experience building production microservices using frameworks such as Spring Boot, Flask, or FastAPI
- Solid understanding of blockchain fundamentals, including transaction models, consensus mechanisms, smart contract interaction (EVM-based and non-EVM), gas and fee management, and block finality across major networks
- Working knowledge of cryptographic primitives and protocols relevant to digital asset custody, including Multi-Party Computation (MPC), threshold signatures (TSS), distributed key generation (DKG), elliptic curve cryptography (ECDSA, EdDSA), and HD wallet derivation paths (BIP-32/BIP-44)
- Experience designing and implementing policy engines or rule-based authorization frameworks for financial transaction workflows, including multi-signature schemes, approval chains, and configurable spending controls
- Proficiency with cloud infrastructure on AWS, including EC2, EKS, Lambda, S3, RDS, IAM, SQS, SNS, API Gateway, and KMS, with experience using Terraform or CloudFormation for infrastructure-as-code
- Strong experience with containerization and orchestration using Docker and Kubernetes, including deployment pipelines, and auto-scaling configurations
- Experience designing and consuming RESTful APIs, with deep understanding of OAuth 2.0, JWT, TLS/mTLS, certificate management, and API security best practices
- Familiarity with event-driven architectures, webhook processing, and asynchronous messaging patterns for handling real-time blockchain state changes and notifications
- Experience with relational (Oracle, PostgreSQL) and NoSQL (DynamoDB, MongoDB, Redis) databases, including schema design, query optimization, and data consistency patterns for financial systems
- Proficiency with observability and monitoring tools such as Datadog, Dynatrace, Splunk, Grafana, or Prometheus for distributed tracing, log aggregation, and performance monitoring
- Solid understanding of agile development methodologies, CI/CD pipelines (Jenkins, GitHub Actions, Spinnaker), and DevOps practices in a large enterprise environment
Preferred Qualifications
- Experience building or operating digital asset custody solutions in a regulated financial institution
- Experience using AI-assisted development tools (e.g., GitHub Copilot, Claude Code ) to accelerate development and test generation, AWS Lambda, Access Control, Agile Programming Methodologies, Amazon Elastic Compute Cloud (EC2), Amazon Simple Storage Service (S3), Amazon Web Services (AWS), Application Programming Interface (API), Architectural Design, Artificial Intelligence (AI), Asset Management, Authentication, Autoscaling, Best Practices, Bitcoin, Blockchain, Broadcasting, Business Banking, Cloud Computing, Commercial Banking, Compensation and Benefits, Computer Science, Construction Estimates, Continuous Deployment/Delivery, Continuous Integration, Cryptographic Protocols, Cryptography, Database Design, Database Technology, DevOps, Digital Certificates, Disaster Recovery, Distributed Computing, Diversity, Docker, Earned Value Management (EVM), Emerging Technology, Enterprise Protection, Ethereum, Financial Services, Financial Systems, Financial Transactions, GitHub, Government, High Availability, Investment Services, Java, Java Platform Enterprise Edition (Java EE/J2EE), Jenkins, Maintain Compliance, Microservices, MongoDB, Network Support, NoSQL, OAuth, Oracle, Performance Analysis, Policy Implementation, PostgreSQL, Programming Tools, Python Programming/Scripting Language, Query Optimization, REST (Representational State Transfer), Redis, Regulations, Reporting Dashboards, Risk, SSL-TLS (Secure Socket Layer - Transport Layer Security), Scalable System Development, Security Software, Simple Queue Service (SQS), Small Business, Software Development, Software Engineering, Splunk, Spring Framework, Systems Engineering, Technical Delivery, Technical/Engineering Design, Test Plan/Schedule, Transaction Processing/Management, Wheel/Front-End Loader
Benefits & conditions
We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.