System Engineer

Location: Charlotte, NC or Iselin, NJ

Job Description

:We are engineering a next-generation Digital Asset Platform designed to solve the "Approval-to-Execution Gap" in institutional finance: ensuring that digital asset transactions are signed only when strictly authorized by policy, without exposing private keys to cloud operators or insiders

.
We are moving beyond standard hot wallets to build an institutional-grade Confidential Custody Infrastructure. Our platform combines Multi-Party Computation (MPC) with hardware-enforced Confidential Computing (TEEs) to create a "glass vault"—a system where key operations are cryptographically isolated, attestable, and mathematically proven secur

• e.
  MPC Protocol Implementation: Architect and implement high-performance threshold signature schemes (specifically DKLS23 or similar) for ECDSA key generation and signi
• ng.Confidential Computing Architecture: Design and build services that run inside Trusted Execution Environments (TEEs), specifically targeting AMD SEV-SNP and Intel TDX via Confidential Containers (CoC
• o).Attestation Framework: Implement the RATS (Remote ATtestation procedureS) architecture (RFC 9334) to ensure that no key share is released until the requesting node proves its hardware and software integrity to a Key Broker Servi
• ce.Hardware Security Integration: Design "Cold Ceremony" workflows that integrate offline hardware tokens as offline Key Encryption Keys (KEKs) for disaster recovery and deep stora
• ge.Secure Enclave Development: Write and optimize memory-safe code (Rust/Go) that operates on key material exclusively within encrypted memory regions, ensuring zero leakage to the host OS or hypervis
• or.Policy-to-Cryptography Binding: Design mechanisms to cryptographically bind business logic approvals (e.g., WebAuthn assertions) directly to the MPC signing session, eliminating the gap between "approval" and "executio

n".
Qualificat

ionsRequired (Must-Hav

• es):Systems Programming: 7+ years of experience in systems-level engineering, with expert proficiency in Go (for orchestration) and Rust (for cryptographic primitiv
• es).Applied Cryptography: Deep experience implementing Threshold Cryptography and Multi-Party Computation (MPC). You should be comfortable implementing papers like GG20 from scra
• tch.Confidential Computing: Hands-on experience with TEE technologies, specifically Confidential Containers (CoCo), AMD SEV-SNP, or Intel SGX/TDX. You must understand attestation flows, measurements, and memory encrypt
• ion.Attestation Standards: familiarity with the RATS architecture and components like Key Broker Services (KBS) and Attestation Services (
• AS).Secure Architecture: Experience designing "Defense-in-Depth" systems where infrastructure (Kubernetes/Cloud) is treated as untrus

ted.
Preferred (Nice-to-Ha

• ves):Experience with OIDC/Identity standards (integrating WebAuthn/FIDO2 with cryptographic operati
• ons).Familiarity with CNCF Trustee or similar attestation framew
• orks.Experience in institutional custody, key management, or high-security fintech environm