Build and operate Go backend services for a non-custodial KMS powering embedded wallets. Implement key recovery, distributed key generation, TEE integrations, authentication and signing-provider flows, security review and hardening, and production operations on Kubernetes, including observability, secrets/certificate management, and compliance controls.
At Offchain, we aren’t just building products: we’re leading a movement.
As pioneers in blockchain scalability and security, we're at the forefront of transforming how the world interacts with decentralized applications. We're laying the foundation that will define the next generation of digital commerce, governance, and human interaction. This involves tackling real-world challenges that come with scaling blockchain technology, without compromising on its core principles: decentralization, security and transparency.
At the center of this vision is our people. Our team is made up of thinkers and doers that embrace new challenges and seek solutions that push existing boundaries. If you’re energized by solving unprecedented problems, and believe in the role that decentralized systems will play in creating a more equitable digital future, then we want to hear from you.
Why Offchain?
Offchain is setting the pace for the entire Ethereum ecosystem. We built the Arbitrum stack that powers Arbitrum One, the most widely adopted Ethereum scaling solution that exists today.
Arbitrum’s ecosystem is undergoing tremendous growth with hundreds of projects and dApps on Arbitrum One today. Over 100 different teams have used Offchain technology to build their own Arbitrum chains. Major players in the space, Robinhood, BlackRock, Ethena Labs, Securitize, Aave, and Apechain are all using the Arbitrum stack.
Arbitrum’s thriving ecosystem wouldn’t exist without our advanced technology stack. Arbitrum, Prysm, ZeroDev. These aren’t just product names. These are tools that are actively reshaping what's possible on Ethereum and advancing its core infrastructure.
To top it all off? We’re backed by $124 million in funding. We’ve demonstrated consistent execution with billions in secured value, thousands of supported projects, and infrastructure processing millions of transactions seamlessly.
The Role:
- The Developer Platform team builds KMS, the key-management and signing service behind ZeroDev's embedded wallets (smart-account / account-abstraction wallets that app developers drop into their products). It is non-custodial: end users control their keys, and the service orchestrates secure creation, authentication, and signing on top of a third-party signing provider. This is security-critical infrastructure, externally audited, with a high review bar. You will own backend services and the cryptographic recovery and trust-model machinery around them on a small, high-ownership team, and help grow the platform from interactive consumer wallets toward programmatic and automated signing and programmable transaction policy.
What you'll work on:
- Go backend services that broker wallet creation, authentication, and signing at scale.
- Key recovery and the committee trust model: distributed key generation and secret sharing that keep the service non-custodial, with recovery authority split across independent committees so no single party ever holds a user's key
- Trusted Execution Environments: reconstructing and operating on key material under hardware isolation and remote attestation
- Authentication and signing-provider integration: the user-facing auth methods that gate signing (passkeys / WebAuthn, OAuth, OTP, sessions, 2FA), and integrating with a third-party signing provider (authorization and policy flows, scoped credentials, quorum / consensus approvals)
- Security review and hardening: writing design docs and decision records, working directly with external security auditors, and turning a high review bar into shipped code
- Production operations on Kubernetes: observability and alerting, secrets and certificate management, on-call, and the compliance controls the domain requires (sanctions screening, PII-safe handling)
Who you are:
- A strong backend engineer who has shipped and operated production services in Go (or an adjacent systems language and is eager to go deep in Go)
- Security-first by default: you reason about threat models, blast radius, and key custody as a habit, and you write code that holds up to security-critical review
- Comfortable with applied-cryptography fundamentals (public-key crypto, signatures, key management). You do not need to be a cryptographer, but you can reason about it and learn fast
- Solid on distributed systems and API design: idempotency, failure modes, and clean service boundaries
- Operationally mature: Kubernetes, observability, and incident response are not foreign to you
- Clear written communicator (design docs, decision records) who thrives in a collaborative, review-heavy culture
- TEE experience (AWS Nitro Enclaves, Intel SGX / TDX, or similar): attestation, enclave key handling, reproducible enclave builds
- Threshold cryptography / MPC in practice: DKG, FROST or other threshold signatures, verifiable secret sharing, resharing
- Account abstraction: ERC-4337, EIP-7702, smart-account or embedded / non-custodial wallet experience
- Built on or integrated a custody / signing provider (Turnkey, Fireblocks, or similar), or built one
- HSM / YubiKey / PIV / secure-element integration
- Been on the receiving end of a third-party security audit and driven the remediation
- WebAuthn / passkeys, OAuth / OIDC, and the Go crypto ecosystem
Nice-to-have
Perks:
- Remote-first global workforce + NY office
- Professional reimbursement program (facilitates industry conference attendance, certifications, and more)
- Medical, dental & vision coverage (US + some other countries)
- 401k retirement plan + company match (US only)
- Wellness stipend
- Home office set up / ergonomic equipment program
Attention Offchain Job Seekers:
This role cannot be performed in California, or Colorado.
Please be advised that there has been a rise in fraudulent recruiter activities, particularly within the Web3 space. If you would like to confirm whether someone is an Offchain employee or the legitimacy of an offer you received, please email [email protected]
At Offchain, we are committed to building a welcoming and supportive workplace for all employees, regardless of their background or identity. We strive to create an environment where everyone feels valued and has an equal opportunity to succeed and thrive. We encourage candidates from all walks of life to apply and join our team.
Similar Jobs
.png)
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Design, build, and operate secure, low-latency authentication and authorization services using Go and gRPC. Own capabilities spanning OAuth, sessions, tokens, 2FA, account recovery, and edge authorization. Lead complex technical initiatives, improve integration tooling, collaborate with product, security, fraud, and infrastructure teams, and mentor engineers while maintaining strong observability, reliability, and security standards.
Top Skills:
2FaBiometric AuthenticationDistributed SystemsDynamoDBGenerative AiGoGrpcJwtOauth 2.0ObservabilityOpenid ConnectPasskeysPkceProtocol BuffersRedisSlos
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Own performance optimization, reliability, observability, capacity modeling, and automated failover for Coinbase’s blockchain node infrastructure. Diagnose resource bottlenecks, reduce infrastructure costs, define SLOs and SLIs, support protocol upgrades, and improve node performance across distributed systems at scale. Collaborate with protocol integration, wallet, and indexer teams while applying backend programming and systems profiling expertise.
Top Skills:
BitcoinBlockchain NodesDatadogDistributed SystemsEthereumGenerative AiGoGrafanaPprofPrometheusSolana
Fintech • Software • Financial Services
Design, build, deploy, and operate Node.js and TypeScript backend services supporting account onboarding, identity verification, agreements, and funding. Own event-driven workflows, asynchronous processing, job orchestration, integrations, reliability, monitoring, and operational tooling. Develop scalable services on Google Cloud Platform and Kubernetes, support expansion into new markets, coordinate technical direction, and mentor engineers. Ensure correctness through idempotency, retries, reconciliation, and resilient handling of partial failures.
Top Skills:
Claude CodeCodexCursorDockerGoogle Cloud PlatformGoogle Cloud Pub/SubKafkaKubernetesNode.jsSQLStatsigTypescript
What you need to know about the Seattle Tech Scene
Home to tech titans like Microsoft and Amazon, Seattle punches far above its weight in innovation. But its surrounding mountains, sprinkled with world-famous hiking trails and climbing routes, make the city a destination for outdoorsy types as well. Established as a logging town before shifting to shipbuilding and logistics, the Emerald City is now known for its contributions to aerospace, software, biotech and cloud computing. And its status as a thriving tech ecosystem is attracting out-of-town companies looking to establish new tech and engineering hubs.
Key Facts About Seattle Tech
- Number of Tech Workers: 287,000; 13% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Amazon, Microsoft, Meta, Google
- Key Industries: Artificial intelligence, cloud computing, software, biotechnology, game development
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Madrona, Fuse, Tola, Maveron
- Research Centers and Universities: University of Washington, Seattle University, Seattle Pacific University, Allen Institute for Brain Science, Bill & Melinda Gates Foundation, Seattle Children’s Research Institute
