Staff Security Engineer – Crypto & Hardware Trust

Gemini; New York (NY); On-site; USD 180,000 - 240,000; Full time

Job summary

Gemini is seeking a Staff Software Engineer (Security) to join the Onchain department in New York. You will help safeguard customers’ digital assets by building and maintaining a trusted execution environment, signing infrastructure, and hardware security integrations.

The role requires hands-on software security work, cryptographic knowledge, and collaboration with Security Operations, Custody, and Platform teams. Advanced security concepts and production-ready implementation are essential.

Qualifications

• Hands-on development in software security areas such as OS kernels, embedded security, cryptographic protocols, or cryptographic hardware (PKCS#11, FIPS, TPMs, HSMs, TEEs).
• Experience with hardware security modules or TPMs, firmware TPMs, or secure enclaves.
• Strong background in systems security, cryptography, or secure build pipelines.

Responsibilities

• Implement software applications for key storage, signing, encryption, code attestation, or secure boot.
• Design and maintain security solutions for digital assets.
• Collaborate with security engineers to scale and secure signing infrastructure.
• Integrate hardware security mechanisms (TPMs/HSMs) into Gemini software.
• Develop tools to embed security into systems and processes.
• Participate in disaster recovery to validate operability.

Skills

Software security

TPM/HSM

Cryptography

OS security

Python

Scripting

Security architecture

Networking security

Tools

PKCS#11

FIPS 201-1 PIV

TEEs

TPMs

HSMs

Job description

Gemini is seeking a Staff Software Engineer (Security) to join the Onchain department in New York. You will help safeguard customers’ digital assets by building and maintaining a trusted execution environment, signing infrastructure, and hardware security integrations.

The role requires hands-on software security work, cryptographic knowledge, and collaboration with Security Operations, Custody, and Platform teams. Advanced security concepts and production-ready implementation are essential.