software engineer for smart wallets and account abstraction

Xsolla Inc.; United States; Remote; USD 180,000 - 260,000; Full time

Benefits offered by this job

Medical benefits

PTO

Career roadmap

Training opportunities

Job summary

Xsolla Inc. ищет опытного инженерa, который возглавит стратегию и архитектуру платформы умного кошелька.

Ваша работа охватит управление жизненным циклом UserOperation под ERC-4337, безопасность взаимодействий с поставщиками и внешними приложениями, а также развитие механизмов оплаты и спонсорства газа. Вы будете координировать работу нескольких команд и формировать дорожные карты, оценивая риски и соответствие требованиям безопасности.

Responsibilities

• Own the technical strategy and architecture of the smart wallet platform, включая account model, signing, session management and gas abstraction
• Design and evolve the ERC-4337 user operation lifecycle, EIP-7702 delegation, deterministic identity-based address derivation, session keys, and permission primitives
• Set the paymaster and gas-sponsorship strategy, включая sponsorship scope, metering, caps, abuse prevention and fallback behavior
• Own the security model for interactions between the signer and third-party applications, включая provider behavior, origin-bound sessions, trust tiers, and transaction and signature confirmations
• Lead the custody roadmap toward MPC-based custody and design recovery paths using passkeys, guardians, and social recovery
• Drive cross-team decisions on account architecture, SDK contracts, data modeling, and platform reliability, and build alignment across relevant teams
• Identify systemic risks and lead initiatives to resolve them before they become incidents
• Define engineering standards, review critical code, contracts, and designs, and support the broader engineering organization через документацию, tooling, и наставничество
• Align roadmaps with product, security, legal, and infrastructure stakeholders и translate business and regulatory needs into technical plans
• Serve as the escalation point for complex production issues in the wallet and account abstraction domain

Job description

Описание:

Xsolla is a global commerce company that provides tools and services to help video game developers fund, distribute, market, and monetize their games. It operates as a merchant of record and supports game developers worldwide.

Задачи:

• Own the technical strategy and architecture of the smart wallet platform, including the account model, signing, session management, and gas abstraction at scale
• Design and evolve the ERC-4337 user operation lifecycle, EIP-7702 delegation, deterministic identity-based address derivation, session keys, and permission primitives
• Set the paymaster and gas-sponsorship strategy, including sponsorship scope, metering, caps, abuse prevention, and fallback behavior
• Own the security model for interactions between the signer and third-party applications, including provider behavior, origin-bound sessions, trust tiers, and transaction and signature confirmations
• Lead the custody roadmap toward MPC-based custody and design recovery paths using passkeys, guardians, and social recovery
• Drive cross-team decisions on account architecture, SDK contracts, data modeling, and platform reliability, and build alignment across relevant teams
• Identify systemic risks and lead initiatives to resolve them before they become incidents
• Define engineering standards, review critical code, contracts, and designs, and support the broader engineering organization through documentation, tooling, and mentorship
• Align roadmaps with product, security, legal, and infrastructure stakeholders and translate business and regulatory needs into technical plans
• Serve as the escalation point for complex production issues in the wallet and account abstraction domain

Требования:

• Deep hands-on understanding of ERC-4337, including EntryPoint, UserOperation lifecycle, bundlers, paymasters, validation rules, gas estimation, counterfactual deployment, and signature validation for undeployed accounts
• Working knowledge of EOA delegation, EIP-7702, its interaction with ERC-4337 EntryPoint v0.8, and related trade-offs and risks
• Experience building or extending production smart account implementations and familiarity with modular account standards
• Experience designing scoped, time-limited, policy-bound session keys and delegated permissions
• Practical knowledge of EIP-712, ERC-1271, WebAuthn/passkey signers, and wallet-facing standards
• Experience designing or operating a production smart wallet or account abstraction system serving real users and real value
• Substantial engineering experience at a large crypto product or protocol organization, or a comparable wallet, exchange, or account-abstraction infrastructure team where wallet correctness and custody were core to the product
• Experience shipping and operating systems where bugs could cause lost funds, including establishing guardrails, reviews, and rollback paths
• Ability to read, review, and write Solidity account, paymaster, and module contracts; knowledge of gas-aware design, upgradeability, migration patterns, and working with external auditors
• Understanding of L2 execution differences and their impact on wallet design, transaction and fee models, finality, reorg behavior, RPC, and indexer semantics
• Strong Go engineering skills, including idiomatic code, concurrency, and performance profiling
• Ability to design and own client-side TypeScript SDK surfaces for internal and external engineering teams
• Experience with distributed systems, their trade-offs and failure modes, and reconciling off-chain state against authoritative on-chain results
• Knowledge of PostgreSQL schema design, query optimization, and large-scale migrations
• Experience deploying, operating, and debugging services in Kubernetes
• Experience with Kafka or NATS, event-driven patterns, consumer groups, and at-least-once delivery
• Knowledge of Git and modern CI/CD practices
• Hands-on experience with production key material, including secure platform storage, HSMs, MPC or threshold signing, and associated operational practices
• Solid understanding of wallet attack surfaces, including phishing, malicious dApp origins, replay attacks, token approval abuse, and paymaster griefing and denial of service
• Proven ability to lead multi-quarter technical initiatives across teams and influence architecture and standards beyond the immediate team
• Strong written and verbal communication skills; able to write actionable RFCs and design documents

Будет плюсом:

• Experience in the video game industry or building platforms for game developers, publishers, or players
• hands-on experience with the zkSync/Elastic Chain ecosystem
• experience with embedded and ecosystem wallet providers or account-abstraction infrastructure vendors
• experience with MPC/threshold custody, social recovery, or guardian-based recovery
• experience with NFT and token infrastructure at scale
• contributions to open-source wallet, security, or identity projects, including ERC/EIP standards
• familiarity with crypto compliance requirements
• experience with identity and authentication integrations for wallet derivation
• platform or infrastructure engineering background
• experience owning a mobile wallet surface
• hands-on experience with modern AI tools for engineering work

Условия:

• Medical, dental, and vision benefits
• Paid time off
• Personalized career roadmap
• Training and educational opportunities