Senior Software Engineer, Custody (IC)

Location: Riyadh Saudi Arabia. Remote-friendly globally. Optional relocation to Riyadh. Reports to: Custody Platform Lead. Type: Full-time. About us: The company is the digital-asset custody and infrastructure platform for the GCC. We hold institutional crypto safely, settle transactions across chains, and expose all of that as a developer API and a regulated-grade institutional console. The role: You are a senior backend engineer with a custody and key-management background. You will be a foundational engineer on the company's custody platform, reporting to the Custody Platform Lead. You will: - Ship production custody code across signing service, key management, chain integrations, and the transaction pipeline. - Own a chain or a subsystem. Within 3 months you should own a meaningful surface end-to-end (a chain integration, a signing-service component, a key-rotation flow). - Pair with the Custody Platform Lead and our in-house cryptography function on threshold signing, share generation, and key recovery flows. - Write post-mortems when things break. We treat these as architecture-improvement opportunities, not blame exercises. - Integrate new chains. Bitcoin, Ethereum and L2s, Solana, and an active onboarding queue. Engage in async written communication. Spec docs, PR descriptions, async design reviews. Must-haves: - 5-plus years of backend engineering, with the last 2-plus years on a custody platform or a key management system at a regulated entity. Hands-on with at least one of: - HSM lifecycle (CloudHSM, YubiHSM, Ledger Vault, similar). - MPC / TSS (Fireblocks-style, Sepior, ZenGo, Curv-style). - Threshold signing schemes (GG18, GG20, FROST, CGGMP21, CMP). Production experience with one or more of: - Bitcoin (UTXO model, PSBT). - Ethereum (EIP-712, EIP-1559, account abstraction). - At least one non-EVM Layer 1 (Solana, Sui, Cosmos SDK chain, similar). - Reads Solidity, Move, or Rust well enough to integrate with new chains without hand-holding. - Strong async written communication. Your PR threads, design docs, and intro reply are themselves a signal. Nice-to-haves: - Experience with travel-rule / FATF compliance integrations (Notabene, Sumsub, TRP, IVMS101). - Authored or contributed to an EIP, BIP, or chain RFC. - Audit-contest finalist on Code4rena, Sherlock, or Cantina. - Familiarity with regulated-financial controls: dual-control, four-eyes, M-of-N approvals, SOC 2 evidence collection. This is not the right role if: - Only frontend / dApp experience, no backend custody or key-management depth. - "Crypto trader who codes." Algorithmic trading without custody experience. - Anyone whose entire blockchain experience is a single hackathon, bootcamp, or DeFi side project. - Currently subject to a non-compete blocking digital-asset custody for more than 6 months. Stack: - Backend: Go primary. Some Rust, some TypeScript. Aurora Postgres and ClickHouse. Temporal for orchestration. - Cryptography: in-house MPC stack (TSS-based), HSM integrations, multi-chain signing service. Chains: Bitcoin, Ethereum and L2s, Solana, active onboarding queue. - Infra: AWS, Kubernetes, GitHub Actions CI, Terraform. - Security posture: SOC 2 Type II in motion, SAMA-aligned, intent toward ISO 27001 and dual-control workflows. - Location: Riyadh, open to Remote Opportunity. - Time-zone band: UTC-1 to UTC+5 for meaningful Saudi-hours overlap. - Relocation (optional): if the candidate elects to relocate to Riyadh, we’ll support sponsorship. - Tax / payroll: KSA payroll for relocators. Contractor or Employer-of-Record for remote-international. Originally posted on Himalayas