Senior Software Engineer, Custody (IC)

Location: Riyadh Saudi Arabia. Remote-friendly globally. Optional relocation to Riyadh. Reports to: Custody Platform Lead. Type: Full-time.

About us

The company is the digital-asset custody and infrastructure platform for the GCC. We hold institutional crypto safely, settle transactions across chains, and expose all of that as a developer API and a regulated-grade institutional console. The role: You are a senior backend engineer with a custody and key-management background.

You will be a foundational engineer on the company's custody platform, reporting to the Custody Platform Lead. You will:

• Ship production custody code across signing service, key management, chain integrations, and the transaction pipeline.
• Own a chain or a subsystem. Within 3 months you should own a meaningful surface end-to-end (a chain integration, a signing-service component, a key-rotation flow).
• Pair with the Custody Platform Lead and our in-house cryptography function on threshold signing, share generation, and key recovery flows.
• Write post-mortems when things break. We treat these as architecture-improvement opportunities, not blame exercises.
• Integrate new chains. Bitcoin, Ethereum and L2s, Solana, and an active onboarding queue. Engage in async written communication. Spec docs, PR descriptions, async design reviews. Must-haves: - 5-plus years of backend engineering, with the last 2-plus years on a custody platform or a key management system at a regulated entity. Hands-on with at least one of:
• HSM lifecycle (CloudHSM, YubiHSM, Ledger Vault, similar).
• MPC / TSS (Fireblocks-style, Sepior, ZenGo, Curv-style).
• Threshold signing schemes (GG18, GG20, FROST, CGGMP21, CMP). Production experience with one or more of:
• Bitcoin (UTXO model, PSBT).
• Ethereum (EIP-712, EIP-1559, account abstraction).
• At least one non-EVM Layer 1 (Solana, Sui, Cosmos SDK chain, similar).
• Reads Solidity, Move, or Rust well enough to integrate with new chains without hand-holding.
• Strong async written communication. Your PR threads, design docs, and intro reply are themselves a signal. Nice-to-haves:
• Experience with travel-rule / FATF compliance integrations (Notabene, Sumsub, TRP, IVMS101).
• Authored or contributed to an EIP, BIP, or chain RFC.
• Audit-contest finalist on Code4rena, Sherlock, or Cantina.
• Familiarity with regulated-financial controls: dual-control, four-eyes, M-of-N approvals, SOC 2 evidence collection. This is not the right role if:
• Only frontend / dApp experience, no backend custody or key-management depth. - "Crypto trader who codes." Algorithmic trading without custody experience.
• Anyone whose entire blockchain experience is a single hackathon, bootcamp, or DeFi side project.
• Currently subject to a non-compete blocking digital-asset custody for more than 6 months. Stack:
• Backend: Go primary. Some Rust, some TypeScript. Aurora Postgres and ClickHouse. Temporal for orchestration.
• Cryptography: in-house MPC stack (TSS-based), HSM integrations, multi-chain signing service. Chains: Bitcoin, Ethereum and L2s, Solana, active onboarding queue.
• Infra: AWS, Kubernetes, GitHub Actions CI, Terraform.
• Security posture: SOC 2 Type II in motion, SAMA-aligned, intent toward ISO 27001 and dual-control workflows. Location: Riyadh, open to Remote Opportunity. Time-zone band: UTC-1 to UTC+5 for meaningful Saudi-hours overlap. Relocation (optional): if the candidate elects to relocate to Riyadh, we’ll support sponsorship. Tax / payroll: KSA payroll for relocators. Contractor or Employer-of-Record for remote-international.