My client is a top global trading platform whose security‑custody team builds high‑stakes financial‑grade security infrastructure for its global business. The team bridges cutting‑edge applied cryptography research with production engineering, heavily utilising MPC, TEE trusted execution, and secure hardware (HSM) to build robust distributed key‑custody systems. They are seeking a hands‑on Senior Expert to own the mission‑critical signing service, lead architecture planning, risk governance and team leadership.
About the role
Join the core secure custody engineering team as a Senior Expert, where you will own our mission‑critical distributed signing service that powers large‑scale business operations. You will ensure stability and business continuity for existing MPC + TEE stack, while leading the design & delivery of next‑generation cross‑environment distributed custody architecture spanning public Cloud and on‑prem IDC, building top‑tier financial‑grade security defense.
You will lead a team of cryptography algorithm experts, TEE researchers and senior engineers, bridging cutting‑edge cryptographic research and production‑grade engineering. This role covers architecture evolution, system reliability, secure hardware integration, technical risk governance, and technical decision‑making for key security components.
What you will do
- Lead technical evolution of Key Management System (KMS). Design distributed multi‑party computation solutions for hybrid deployment: public cloud, self‑hosted IDC and security‑hardware appliances; improve system disaster‑recovery and fault‑isolation capability.
- Own maintenance and continuous optimization of production signing services. Drive code refactoring and performance tuning, mitigate security risks, guarantee high availability under high‑throughput workloads and end‑to‑end business safety.
- Lead cross‑functional team of cryptography experts, TEE researchers and senior backend engineers. Align engineering resources and translate state‑of‑the‑art cryptography & secure‑hardware research into robust production implementations.
- Own technical evaluation, procurement review and deployment for security hardware including HSMs and specialized secure servers; drive end‑to‑end hardware‑software co‑design security solutions.
- Gate‑keep high‑impact technical decisions: signature algorithm upgrades, TEE isolation design and security boundary definition. Establish rigorous code‑audit and release governance processes, take technical accountability for the whole custody system security.
What you need
- 5+ years professional backend engineering experience, solid hands‑on proficiency in C++, Go or Rust. The primary stack is Rust; strong C++/Go engineers willing to adopt Rust are highly welcome.
- Deep understanding of secure key‑custody scenarios; practical knowledge of MPC protocols (GG20, MPC‑CMP etc.) and TEE technologies (SGX, Nitro, TrustZone), including real‑world trade‑offs in production.
- Proven distributed‑system design experience; background building high‑concurrency, strong‑consistency financial / payment‑grade systems. Track record of smooth refactoring on top of complex legacy systems.
- Hands‑on experience with cloud security primitives. Prior experience with on‑prem IDC operations, physical server management or HSM integration is a strong plus.
Nice‑to‑have
- Production‑grade Rust development experience or open‑source contributions in Rust ecosystem.
- R&D leadership experience for large‑scale institutional custody systems or secure hardware product companies.
- Solid applied cryptography engineering background; deep awareness of implementation risks including side‑channel attacks and cryptographically‑secure random number pitfalls.
What we offer
- Work on high‑stakes, large‑scale security‑critical infrastructure.
- Collaborate with world‑class cryptographers, security researchers and backend engineers.
- End‑to‑end ownership to shape next‑generation distributed key‑custody architecture.
- Competitive total compensation package, flexible working model and ample career‑growth opportunities.
