Senior Software Engineer, Developer Platform

Role Description At Offchain, we aren’t just building products: we’re leading a movement. As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security, and transparency. The Developer Platform team builds KMS, the key-management and signing service behind ZeroDev's embedded wallets. It is non-custodial: end users control their keys, and the service orchestrates secure creation, authentication, and signing on top of a third-party signing provider. You will own backend services and the cryptographic recovery and trust-model machinery around them on a small, high-ownership team, and help grow the platform from interactive consumer wallets toward programmatic and automated signing and programmable transaction policy. What you'll work on Go backend services that broker wallet creation, authentication, and signing at scale. Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non-custodial. Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation. Authentication and signing-provider integration: user-facing auth methods that gate signing and integrating with a third-party signing provider. Security review and hardening: writing design docs and decision records, working directly with external security auditors. Production operations on Kubernetes: observability and alerting, secrets and certificate management, on-call, and compliance controls. Qualifications A strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language). Security-first by default: you reason about threat models, blast radius, and key custody as a habit. Comfortable with applied-cryptography fundamentals (public-key crypto, signatures, key management). Solid on distributed systems and API design: idempotency, failure modes, and clean service boundaries. Operationally mature: Kubernetes, observability, and incident response are not foreign to you. Clear written communicator (design docs, decision records) who thrives in a collaborative, review-heavy culture. Nice-to-have TEE experience (AWS Nitro Enclaves, Intel SGX / TDX, or similar). Threshold cryptography / MPC in practice: DKG, FROST or other threshold signatures. Account abstraction: ERC-4337, EIP-7702, smart-account or embedded / non-custodial wallet experience. Built on or integrated a custody / signing provider (Turnkey, Fireblocks, or similar). HSM / YubiKey / PIV / secure-element integration. Been on the receiving end of a third-party security audit and driven the remediation. WebAuthn / passkeys, OAuth / OIDC, and the Go crypto ecosystem. Benefits Remote-first global workforce + NY office. Annual company offsite + team onsites. Professional reimbursement program (facilitates industry conference attendance, certifications, and more). Medical, dental