Lead Wallet Security Architect – Digital Assets

barclays; United States; On-site; USD 210,000 - 270,000; Full time

Benefits offered by this job

Incentive award

Job summary

Barclays is seeking a Principal Wallet Security Engineer to define and deliver the security architecture for our digital assets wallet platform. You will lead cryptographic controls, signing workflows, key management, and transaction authorization cross-functionally with engineering, cyber security, risk, and architecture teams.

The role requires deep expertise in HSMs, MPC, cloud and on-prem security, Kubernetes, and Zero Trust, with a focus on secure, regulated institutional-grade platforms

Qualifications

• Experience designing and securing institutional wallet platforms for custody and settlement.
• Deep expertise with HSMs, MPC, and enterprise key management.
• Hands-on with lifecycle controls, secrets mgmt, certs, and PKI services.
• Ability to lead threat modeling and security reviews across complex stacks.

Responsibilities

• Define and deliver the security architecture for Barclays' wallet platform.
• Collaborate across engineering, cyber security, risk, and architecture teams.
• Secure signing workflows, key management, and transaction controls.
• Ensure regulatory compliance and operational resilience of the wallet system.
• Mentor engineers and lead secure-by-design practices across the team.

Skills

Wallet security

HSMs

MPC

Key management

Threat modeling

Security architecture

Secure-by-design

Cloud security

Kubernetes

Zero Trust

Identity & access management

Tools

Kubernetes

PKI

HSMs

MPC

Key management

TLS/SSL

Job description

Barclays is seeking a Principal Wallet Security Engineer to define and deliver the security architecture for our digital assets wallet platform. You will lead cryptographic controls, signing workflows, key management, and transaction authorization cross-functionally with engineering, cyber security, risk, and architecture teams.

The role requires deep expertise in HSMs, MPC, cloud and on-prem security, Kubernetes, and Zero Trust, with a focus on secure, regulated institutional-grade platforms