HSM/Crypto Custody Engineer
San Francisco/Austin/Dallas
Fulltime
$120K
HSM/Crypto Custody Engineer with hands-on experience in building and operating HSM-backed signing infrastructure for self-custody platforms. Experience in crypto exchanges or institutional custody is required.
Years of experience needed 5+ years
Technical Skills:
Primary Skills:
HSM Platforms: Thales Luna, AWS CloudHSM, Utimaco, Ledger Enterprise
Protocols: PKCS#11, JCE/JCA, REST/gRPC
Key Management: BIP32/44, MPC, Shamir Secret Sharing
Cryptography: ECDSA (secp256k1), EdDSA, threshold signatures
Architecture: HSM clustering, geo-redundancy, quorum controls
ATS Integration: Low-latency signing, high throughput
Compliance: FIPS 140-2 Level 3, SOC 2 Type II
Custody: Key ceremonies, cold/warm/hot wallets
Agile methodology
AI/Automation skills
Secondary Skills:
Cloud Platforms (AWS, Google Cloud Platform)
Key Responsibilities
HSM Engineering: Build and operate secure key management and signing systems
Transaction Signing: Ensure low-latency, high-throughput processing
Key Management: Secure key generation, storage, and lifecycle
Architecture: Design resilient, geo-redundant HSM solutions
Custody Platform: Implement wallet and custody architecture
Security & Compliance: Adhere to FIPS and SOC standards
Risk Management: Prevent key compromise and failure scenarios
Collaboration: Work with ATS and architecture teams
Problem Solving: Troubleshoot performance and cryptographic issues
Mentorship: Guide team members
Never miss an opportunity! Create an alert based on the job you applied for.
