Wells Fargo Logo

Wells Fargo

Lead Cryptography Engineer (MPC & Confidential Computing)

Reposted 2 Months Ago
Be an Early Applicant
Hybrid
Columbus, OH
159K-305K Annually
Senior level
Hybrid
Columbus, OH
159K-305K Annually
Senior level
Lead architecture and implementation of a core Key Management Service using MPC threshold signing (e.g., DKLS23) and TEEs (AMD SEV‑SNP, Intel TDX). Build attestation (RATS) workflows, integrate hardware tokens for KEKs, write memory‑safe Rust/Go enclave code, and bind business approval policies to MPC signing sessions. Ensure high‑performance, secure distributed key generation and signing for institutional digital assets.
The summary above was generated by AI
About this Role:
Wells Fargo is seeking a Lead Specialty Software Engineer (Cryptography Engineer) to contribute to a next-generation Digital Asset Platform designed to solve the most critical challenge in institutional finance: achieving strict regulatory compliance without compromising transaction confidentiality. As a Lead Cryptography Engineer you will be responsible for architecting the core Key Management Service (KMS). You will sit at the intersection of applied cryptography, hardware security, and distributed systems, implementing threshold signing protocols inside attested execution environments.
Why Join Us?
  • Work on "Hard" Problems: You aren't just calling crypto libraries; you are building a system where code meets hardware to solve fundamental trust problems in digital finance
  • High-Impact Engineering: Your code will secure billions in institutional assets against nation-state level threats and insider attacks
  • Technical Autonomy: You'll lead architectural decisions for the custody engine, defining how we leverage the latest in MPC and Confidential Computing

Responsibilities:
  • MPC Protocol Implementation: Architect and implement high-performance threshold signature schemes (specifically DKLS23 or similar) for ECDSA key generation and signing
  • Confidential Computing Architecture: Design and build services that run inside Trusted Execution Environments (TEEs), specifically targeting AMD SEV-SNP and Intel TDX via Confidential Containers (CoCo)
  • Attestation Framework: Implement the RATS (Remote ATtestation procedureS) architecture (RFC 9334) to ensure that no key share is released until the requesting node proves its hardware and software integrity to a Key Broker Service
  • Hardware Security Integration: Design "Cold Ceremony" workflows that integrate offline hardware tokens as offline Key Encryption Keys (KEKs) for disaster recovery and deep storage
  • Secure Enclave Development: Write and optimize memory-safe code (Rust/Go) that operates on key material exclusively within encrypted memory regions, ensuring zero leakage to the host OS or hypervisor
  • Policy-to-Cryptography Binding: Design mechanisms to cryptographically bind business logic approvals (e.g., WebAuthn assertions) directly to the MPC signing session, eliminating the gap between "approval" and "execution"


Required Qualifications:
  • 5+ years of Specialty Software Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
  • 3+ years of experience in backend or systems programming, with expert-level proficiency in Go (Golang)
  • 6+ months of experience with Elliptic Curve Cryptography (ECC)
  • 1+ year of experience withBFT consensus algorithms, P2P networking, and state replication; reliable distributed systems experience

Desired Qualifications:
  • Blockchain Core: Deep experience with Cosmos SDK and CometBFT. Comfort building custom modules and modifying consensus logic, not just deploying smart contracts
  • Pedersen Commitments (Homomorphic encryption properties)
  • Zero-Knowledge Proofs (specifically Bulletproofs or Sigma protocols)
  • Math-to-Code: Demonstrated ability to read academic whitepapers/preprints and translate mathematical specifications into functioning code
  • Experience with MPC (Multi-Party Computation) or Verifiable Secret Sharing (VSS) schemes
  • Familiarity with the Ristretto255 curve or libraries like gnark-crypto
  • Background in FinTech, payment systems, or high-frequency trading platforms
  • Understanding of the Account Model vs. UTXO Model trade-offs in privacy-preserving ledgers

Job Expectations:
  • This position offers a hybrid work schedule
  • Relocation assistance is not available for this position

Locations:
  • 3075 Loyalty Circle, Columbus, Ohio
  • 1755 Grant Street, Concord, California
  • 194 S. Wood Ave., Iselin, New Jersey
  • 150 E 42nd St., New York, New York



    Pay Range
    Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.
    $159,000.00 - $305,000.00
    Benefits
    Wells Fargo provides eligible employees with a comprehensive set of benefits, many of which are listed below. Visit Benefits - Wells Fargo Jobs for an overview of the following benefit plans and programs offered to employees.
    • Health benefits
    • 401(k) Plan
    • Paid time off
    • Disability benefits
    • Life insurance, critical illness insurance, and accident insurance
    • Parental leave
    • Critical caregiving leave
    • Discounts and savings
    • Commuter benefits
    • Tuition reimbursement
    • Scholarships for dependent children
    • Adoption reimbursement

    Posting End Date:
    29 Oct 2026
    * Job posting may come down early due to volume of applicants.
    We Value Equal Opportunity
    Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.
    Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.
    Applicants with Disabilities
    To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .
    Drug and Alcohol Policy
    Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.
    Wells Fargo Recruitment and Hiring Requirements:
    a. Third-Party recordings are prohibited unless authorized by Wells Fargo.
    b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.
    #BI-Hybrid

    Similar Jobs at Wells Fargo

    4 Days Ago
    Hybrid
    42K-74K Hourly
    Senior level
    42K-74K Hourly
    Senior level
    Fintech • Financial Services
    Leads systems operations and site reliability engineering for highly available enterprise platforms. Responsibilities include managing infrastructure, improving automation and operational efficiency, supporting large-scale Java and .NET applications, implementing observability, resolving incidents, conducting root cause analysis, and coordinating with vendors and technical teams. The role also supports resilient hybrid and public cloud environments, CI/CD tooling, infrastructure automation, self-healing systems, and AI/ML production workloads. Periodic evening or weekend on-call availability and at least three office days weekly are required.
    Top Skills: .NetAnsibleAppdynamicsArtifactoryAutomationAviBigpandaCi/CdElasticF5GrafanaHarnessHybrid CloudItilJavaJenkinsMicrosoft Application InsightsMicrosoft Sql ServerMongoDBNoSQLObservabilityOraclePublic CloudRdbmsSite Reliability EngineeringSplunkSystems EngineeringTerraform
    10 Days Ago
    Hybrid
    100K-163K Annually
    Senior level
    100K-163K Annually
    Senior level
    Fintech • Financial Services
    Lead network security policy implementation, manage global production networks, maintain data network availability, conduct proactive testing, remediate capacity issues, and design secure compliant solutions. Provide impact analysis, change management plans, and operational documentation while mentoring network operations teams. Collaborate with infrastructure teams to improve standards, automation, and operational excellence using Python, Ansible, network data management, APIs, and orchestration tools.
    Top Skills: AnsibleAPIsDevOpsDjango OrmFirewallsGitGraphQLInternet ProtocolJenkinsJinjaJIRAJSONNautobotNetwork AutomationPythonRestRoutersServicenowYamlYang
    One Month Ago
    Hybrid
    119K-224K Annually
    Senior level
    119K-224K Annually
    Senior level
    Fintech • Financial Services
    Architect and implement a production-grade settlement engine: build Cosmos SDK/CometBFT-based blockchain modules in Go, implement and optimize ECC-based privacy primitives (Pedersen commitments, Bulletproofs), customize consensus via ABCI++ for on-chain MPC mixing, design a KVStore for homomorphically encrypted balances, and create secure off-chain auditing/view-key mechanisms for regulated institutions.
    Top Skills: Abci++Bft ConsensusBulletproofs (Range Proofs)Cometbft (Tendermint)Cosmos SdkElliptic Curve Cryptography (Ecc)Gnark-CryptoGo (Golang)Homomorphic EncryptionKvstoreMpc (Multi-Party Computation)P2P NetworkingPedersen CommitmentsRistretto255

    What you need to know about the Colorado Tech Scene

    With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

    Key Facts About Colorado Tech

    • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
    • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
    • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
    • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
    • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
    • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

    Sign up now Access later

    Create Free Account

    Please log in or sign up to report this job.

    Create Free Account