Staff Software Engineer – Smart Wallet, Account Abstraction

This is a fully remote position, open to applicants in Russia.

📋 Description

• Take charge of the technical strategy and architecture for Xsolla's smart wallet platform, which encompasses the account model, signing processes, session management, and gas abstraction.

• Design and enhance the ERC-4337 user-operation lifecycle, EIP-7702 delegation, deterministic identity-based address derivation, session keys, and permission primitives.

• Establish paymaster and gas sponsorship strategies, addressing aspects such as metering, caps, abuse prevention, and degraded operation protocols.

• Oversee the security of the dApp-facing signer interface, which includes provider behavior, origin-bound sessions, trust tiers, and transaction/signature confirmation flows.

• Lead the custody roadmap towards MPC-based custody and develop recovery paths utilizing passkeys, guardians, and social recovery methods.

• Drive decisions regarding account architecture, SDK contracts, data modeling, and platform reliability across wallet, marketplace, SDK, mobile, and security teams.

• Identify and mitigate systemic risks related to key management, phishing attacks, reorgs, indexer staleness, bundlers, RPC dependencies, and contract upgrades.

• Define engineering standards and review critical code, contracts, and design proposals.

• Create leverage through thorough documentation, tooling, and mentorship initiatives.

• Collaborate with product, security, legal, and infrastructure teams to align on the roadmap and address regulatory needs.

• Act as the escalation point for intricate production wallet and account-abstraction challenges.

• Manage the account model for Xsolla ZK, its zkSync-based L2, and the wallet embedded within the Xsolla App.

• Facilitate Web3 features, including minting, gifting, marketplace trading, reward airdrops, gas sponsorship, and dApp access.

⛳️ Requirements

• Profound, hands-on knowledge of ERC-4337, covering EntryPoint v0.6–v0.8, UserOperation lifecycle, bundlers, paymasters, ERC-7562 validation rules, gas estimation, counterfactual deployment, and ERC-6492 signature validation.

• Practical understanding of EIP-7702, EOA delegation, EntryPoint v0.8 interactions, and the associated risks.

• Experience in building or extending production smart account implementations such as Safe, Kernel, Biconomy, or Coinbase Smart Wallet.

• Familiarity with modular account standards like ERC-7579 and ERC-6900.

• Experience in designing session keys and delegated permissions, including TTLs, contract allowlists, origin binding, revocation, ERC-7710, and ERC-7715.

• Strong command of EIP-712, ERC-1271, WebAuthn/passkeys with P-256, EIP-1193, EIP-6963, EIP-5792, and ERC-7677.

• Experience in designing or operating a production smart wallet or account abstraction system that serves real users and delivers real value.

• Significant engineering experience within a large crypto product or protocol organization, or similar wallet, exchange, or account-abstraction infrastructure team.

• Experience in operating systems where bugs could lead to lost funds, complete with concrete guardrails, reviews, and rollback strategies.

• Ability to read, review, and write Solidity contracts for accounts, paymasters, and modules.

• Knowledge of gas-aware design, upgradeability and migration patterns, along with experience working with external auditors.

• Understanding of L2 execution differences, zkSync-family chains, transaction and fee models, finality, reorg behavior, RPC, and indexer semantics.

• Strong proficiency in Go engineering, including idiomatic coding, concurrency patterns, and performance profiling.

• Capability to design and manage client-side TypeScript SDK interfaces.

• Experience with distributed systems and comprehension of consistency, availability, failure modes, and on-chain/off-chain reconciliation.

• Expertise in PostgreSQL schema design, query optimization, and large-scale migrations.

• Proficient in Kubernetes deployment, operations, and debugging.

• Experience with Kafka or NATS event-driven patterns, consumer groups, and at-least-once delivery mechanisms.

• Proficiency with Git and modern CI/CD practices.

• Hands-on experience with production key management using Keychain/Keystore, HSMs, MPC, or threshold signing.

• Solid understanding of wallet threats, such as phishing, malicious dApp origins, replay attacks, token approval abuse, paymaster griefing, and DoS.

• Proven ability to lead multi-quarter technical initiatives across various teams.

• A history of influencing architecture and standards beyond the immediate team.

• Strong written and verbal communication skills, with the ability to produce effective RFCs and design documents.

🏝️ Benefits

• Full-time employment.

• Remote work arrangement.