Senior Backend Engineer, ZeroDev Wallet

Team: Engineering

Location: Remote

Commitment: Full-time

Workplace Type: remote

The Role:

The Developer Platform team builds KMS, the key-management and signing service behind ZeroDev's embedded, non-custodial wallets. These are smart-account / account-abstraction wallets that developers integrate directly into their applications. End users retain control of their keys, while KMS security orchestrates wallet creation, authentication and signing on top of a third-party signing provider.

You'll own production Go services and the cryptographic recovery and trust-model systems around them, working in a small, high-ownership team. This is security-critical infrastructure with a high review bar and external security audits. You should already be comfortable with applied-cryptography fundamentals such as public-key cryptography, signatures and key management. You don’t need to be a cryptographer or have prior experience with areas like MPC or TEEs, but you should be able to reason about cryptographic systems and their security implications. 

As the platform evolves, you'll also help expand it beyond interactive consumer wallets toward programmatic and automated signing, and programmable transaction policies.

What you'll work on:

• Backend services: build and operate Go services that power wallet creation, authentication, and signing at scale
• Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non-custodial, with recovery authority split across independent committees so no single party holds a user's key
• Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation
• Authentication and signing-provider integration: the user-facing auth methods that gate signing (passkeys / WebAuthn, OAuth, OTP, sessions, 2FA), and integrating with a third-party signing provider (authorization and policy flows, scoped credentials, quorum / consensus approvals)
• Security review and hardening: writing design docs and decision records, working directly with external security auditors, and turning a high review bar into shipped code
• Production operations on Kubernetes: observability and alerting, secrets and certificate management, on-call, and the compliance controls the domain requires (sanctions screening, PII-safe handling)
 

Who you are:

• Strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language and is eager to go deep in Go)
• Security-first by default: You naturally think about threat models, blast radius and key custody, and write code that holds up to security-critical review
• Comfortable with applied-cryptography: You understand fundamentals such as public-key cryptography, signatures and key management, and can reason about how they apply to production systems. You don't need to be a cryptographer!
• Solid on distributed systems and API design: You’re comfortable reasoning about idempotency, failure modes and clean service boundaries
• Operationally experienced: You’ve worked with production infrastructure and are comfortable with Kubernetes, observability and incident response
• Clear written communicator: You can explain technical decisions through design docs and decision records, and work effectively in a collaborative, review-heavy environment.
  
  
Nice-to-have

You don't need to have worked with all of these. Experience in one or more would be valuable.
• Trusted Execution Environments (TEE) such as AWS Nitro Enclaves, Intel SGX / TDX or similar
• Threshold cryptography / MPC, including DKG, FROST or other threshold signatures, verifiable secret sharing or resharing
• Account abstraction, including ERC-4337, EIP-7702, smart accounts or embedded / non-custodial wallets
• Custody or signing infrastructure such as Turnkey or Fireblocks, either as an integrator or builder
• HSMs, YubiKey / PIV or secure-element integrations
• Third-party security audits and driving remediation through to completion
• Authentication technologies such as WebAuthn / passkeys and OAuth / OIDC, or experience with the Go crypto ecosystem
 

Perks:

• Remote-first global workforce + NY office
• Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
• Medical, dental & vision coverage (US + some other countries)
• 401k retirement plan + company match (US only)
• Wellness stipend
• Home office set up / ergonomic equipment program