Senior Software Engineer, Developer Platform — Offchain

The Bitcoin Street Journal; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Annual offsite + team onsites

Professional reimbursement program

Medical, dental & vision coverage (US)

401k retirement plan + company match (

Wellness stipend

Home office setup

Job summary

Offchain is seeking a Senior Software Engineer for the Developer Platform who will own backend services and the cryptographic recovery and trust‑model machinery behind our non‑custodial wallet infrastructure. You will help scale KMS‑driven signing and key management in a security‑critical, externally audited environment.

You bring strong Go backend experience, a security‑first mindset, knowledge of cryptography fundamentals, and proven ability to operate distributed systems on Kubernetes, while

Qualifications

• Strong backend engineer with production Go experience.
• Security‑first by default with threat modeling.
• Comfort with applied-cryptography fundamentals.
• Solid distributed systems and API design experience.

Responsibilities

• Develop Go backend services for wallet creation, authentication, and signing at scale.
• Implement key recovery and committee trust models with distributed key generation and secret sharing.
• Work with TEEs and hardware isolation concepts for cryptographic material handling.
• Integrate with third‑party signing providers and manage policy flows and approvals.
• Participate in security reviews, design docs, and audits.
• Maintain production operations on Kubernetes including observability and incident response.

Skills

Go language

Backend Go

Security mindset

Distributed systems

API design

Kubernetes

Cryptography basics

Tools

KMS

Terraform

WebAuthn

Job description

Senior Software Engineer, Developer Platform

• Company: Offchain
• Location: Remote
• Sector: Blockchain
• Source: web3.career

The Role

• The Developer Platform team builds KMS, the key‑management and signing service behind ZeroDev’s embedded wallets (smart‑account / account‑abstraction wallets that app developers drop into their products). It is non‑custodial: end users control their keys, and the service orchestrates secure creation, authentication, and signing on top of a third‑party signing provider. This is security‑critical infrastructure, externally audited, with a high review bar. You will own backend services and the cryptographic recovery and trust‑model machinery around them on a small, high‑ownership team, and help grow the platform from interactive consumer wallets toward programmatic and automated signing and programmable transaction policy.

What you’ll work on

• Go backend services that broker wallet creation, authentication, and signing at scale.
• Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non‑custodial, with recovery authority split across independent committees so no single party ever holds a user’s key.
• Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation.
• Authentication and signing‑provider integration: the user‑facing auth methods that gate signing (passkeys / WebAuthn, OAuth, OTP, sessions, 2FA), and integrating with a third‑party signing provider (authorization and policy flows, scoped credentials, quorum / consensus approvals).
• Security review and hardening: writing design docs and decision records, working directly with external security auditors, and turning a high review bar into shipped code.
• Production operations on Kubernetes: observability and alerting, secrets and certificate management, on‑call, and the compliance controls the domain requires (sanctions screening, PII‑safe handling).

Who you are

• A strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language and is eager to go deep in Go).
• Security‑first by default: you reason about threat models, blast radius, and key custody as a habit, and you write code that holds up to security‑critical review.
• Comfortable with applied‑cryptography fundamentals (public‑key crypto, signatures, key management). You do not need to be a cryptographer, but you can reason about it and learn fast.
• Solid on distributed systems and API design: idempotency, failure modes, and clean service boundaries.
• Operationally mature: Kubernetes, observability, and incident response are not foreign to you.
• Clear written communicator (design docs, decision records) who thrives in a collaborative, review‑heavy culture.

Nice‑to‑have

• TEE experience (AWS Nitro Enclaves, Intel SGX / TDX, or similar): attestation, enclave key handling, reproducible enclave builds.
• Threshold cryptography / MPC in practice: DKG, FROST or other threshold signatures, verifiable secret sharing, resharing.
• Account abstraction: ERC‑4337, EIP‑7702, smart‑account or embedded / non‑custodial wallet experience.
• Built on or integrated a custody / signing provider (Turnkey, Fireblocks, or similar), or built one.
• HSM / YubiKey / PIV / secure‑element integration.
• Been on the receiving end of a third‑party security audit and driven the remediation.
• WebAuthn / passkeys, OAuth / OIDC, and the Go crypto ecosystem.
• Annual company offsite + team onsites.
• Professional reimbursement program (facilitates industry conference attendance, certifications, and more).
• Medical, dental & vision coverage (US + some other countries).
• 401k retirement plan + company match (US only).
• Wellness stipend.
• Home office set up / ergonomic equipment program.

This role cannot be performed in California, or Colorado.

At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.