Rust Cryptography Engineer

RedotPay; Hong Kong; On-site; HKD 1,000,000 - 1,500,000; Full time

Job summary

RedotPay is seeking a Rust-focused cryptography engineer to design MPC/TSS core capabilities, including DKG, threshold signatures, and key recovery. You will work on multi-curve support (secp256k1, Ed25519) and assurance for secure isolation between sensitive address pools and the Vault.

You will implement share nodes in secure environments, collaborate with AWS Nitro Enclave/KMS, and help drive attestation, auditability, and robust threat modeling across the platform.

Qualifications

• Proficient in Rust, with production and delivery experience of security-sensitive systems or cryptographic libraries.
• Solid foundation in applied cryptography, with experience implementing MPC/TSS or similar threshold systems.
• Understand custody wallet business (address derivation, collection/withdrawal, cold/hot derivation) or have industry experience.
• Security development awareness in TEE/Enclave or hardware isolation environments (Nitro/SGX/SEV).
• Emphasize correctness, auditability, and key material lifecycle management; read protocol papers and implement projects.
• Cross-language collaboration ability (Java on mid-platform).
• Experience in MPC production in payment/exchange/custody domains and AWS Nitro Enclave.

Responsibilities

• Design and implement MPC/TSS core capabilities using Rust: DKG, threshold signature, refresh, reshare, and key recovery processes.
• Support multi-curve signature requirements (secp256k1, Ed25519) and derive secure isolation for recharge address pools and vaults.
• Implement share nodes and protocol cores into secure environments, collaborating with AWS Nitro Enclave/KMS to improve attestation and threat models.
• Collaborate with wallet mid-platform, security, and SRE teams to provide stable signature API and bind policies to sessions.
• Establish test vectors, fuzz tests, and audit documentation to facilitate third-party cryptographic audits and reinforcement.
• Contribute to key ceremony participation, disaster recovery, and node replacement exercises.

Skills

Rust

MPC/TSS

Threshold signatures

Applied cryptography

Security engineering

Cross-language

Tools

AWS Nitro Enclave

KMS

gRPC

FFI integration

Job description

• Design and implement MPC/TSS core capabilities using Rust: DKG, threshold signature, refresh, reshare, and cryptographic processes related to key recovery.
• Support multi-curve signature requirements (at least secp256k1 ECDSA, Ed25519), and design a key derivation scheme that meets the isolation between the recharge address pool and the business Vault.
• Implement share nodes and protocol cores into a secure operating environment (including collaboration with AWS Nitro Enclave/KMS, etc.) to improve attestation and threat models.
• Collaborate with wallet mid-platform, security, SRE, provide stable signature API, and bind approval/allowlist/limit policies to signature session.
• Establish test vectors, fuzz tests, and audit documents to promote third-party cryptographic audits and continuous reinforcement.
• Technical solutions for participating in key ceremony, disaster recovery, and node replacement exercises.

Job requirements :

• Proficient in Rust, with production and delivery experience of security-sensitive systems or cryptographic libraries.
• Possess a solid foundation in applied cryptography, with experience in implementing/porting/deeply integrating MPC/TSS or equivalent threshold signature systems.
• Understand the custody wallet business (address derivation, collection/withdrawal, cold and hot stratification) or have industry experience and can quickly align.
• Possess security development awareness in TEE/Enclave or hardware isolation environments (priority given to Nitro/SGX/SEV, etc.).
• Emphasize correctness, auditability, and key material lifecycle management; able to read protocol papers and implement projects.
• Good cross-language collaboration ability (mid-platform mainly Java).
• Experience in MPC production in payment/exchange/custody industry.
• AWS Nitro Enclave in action; HD/hardened derivation under MPC;
• Experience in multi-chain signature adaptation, cryptographic auditing, and gRPC/FFI integration.