Staff Engineer — Custody Platform (The Vault)

About Us

The Vault, an MPC-based crypto custody platform for institutional and retail customers. We run threshold signing with non-extractable key shares across HSM and Ledger hardware, support a growing surface of chains and assets, and are pushing toward post-quantum readiness and SaaS-grade scale. Series A is ahead, the 2026 productized launch is in flight, and we publish original cryptographic research alongside the product work.

About the Role

We're hiring a Staff Engineer to design, build, and ship the custody platform's hardest backend code. This is a hands-on IC role with real technical leadership: you write production code every day, own non-trivial cross-cutting initiatives, lead through RFCs and code, and mentor senior engineers — without managing people.

You shape architectural decisions in your work area through code, RFCs, and design reviews. Platform-wide architectural ownership (technology stack, core/periphery boundary, deployment models, post-quantum migration) sits with our technical leadership — you contribute to those decisions strongly, but you don't own them. If you want a role with the architecture-function hammer, this is not it. If you want a role where your code, your designs, and your judgment are the strongest signals in the room, it is.

We're hiring on the bet that engineering judgment, CS fundamentals, and ownership mindset matter more than specific language fluency in an AI-assisted era. We use Claude Code, Cursor, and Codex heavily. What we need is the depth to read AI-generated code critically — to catch the subtle concurrency, consistency, or security bugs that AI doesn't — and the ownership to drive non-trivial initiatives from idea to production reliability.

Both Staff Engineers on the team (this role and the Fullstack role) contribute across the codebase, with natural gravitation over time toward either the security-critical core (MPC library, threshold signing, HSM and Ledger integration, key lifecycle, cryptographic primitives) or the faster-moving periphery (chain and asset adapters, partner integrations, recovery and policy flows, APIs and SDKs).

What You'll Do

• Design, write, and ship critical platform components: policy engine, signing orchestration, key lifecycle workflows, recovery flows, approvals, audit trails, multi-tenant wallet and account services.
• Lead non-trivial cross-cutting initiatives in your area — through written RFCs, design reviews, and code, not through hierarchy.
• Build high-load, multi-tenant SaaS systems: tenant isolation, quotas, rate limits, backpressure, concurrency control, predictable latency under spikes.
• Distributed systems & reliability: idempotency, retries, outbox/inbox, event-driven workflows, sagas and state machines, replay, graceful degradation.
• Security-by-design: least privilege, secret handling, mTLS/JWT, tamper-evident logs, audit-ready data models — designed for SOC 2, ISO 27001, and DORA scope from day one.
• Performance & data: profiling, load testing, benchmarking, contention analysis, GC tuning; strong relational modelling (Postgres or equivalent), migrations, indexing, clear consistency boundaries.
• AI-assisted development as a core competency: ship production code with Claude Code, Cursor, and Codex; build the prompt and agent patterns that work for your area; contribute to the company's AI engineering practices; know when to use AI heavily (periphery, integrations, tests, docs) and when not to (cryptographic core, signing paths) where blind generation is unsafe.
• Set patterns and shared libraries for the services your area touches; raise the bar through code review and example.
• Own features end-to-end: design notes / RFCs, code, tests, observability, rollout, on-call. No "throw it over the wall" handoffs.
• Mentor senior engineers: your reviews and your written designs are the strongest signal to the rest of the team.

Must-Have Experience

• Strong CS fundamentals — our primary screening criterion.