Lead Cryptography Engineer (MPC & Confidential Computing)

As a Lead Cryptography Engineer at Wells Fargo, you will architect the core Key Management Service for a next-generation Digital Asset Platform built to achieve strict regulatory compliance without compromising transaction confidentiality. You will sit at the intersection of applied cryptography, hardware security, and distributed systems, implementing threshold signing protocols inside attested execution environments and securing billions in institutional assets.

What you'll do

• Architect and implement high-performance threshold signature schemes, specifically DKLS23 or similar, for ECDSA key generation and signing
• Design and build services that run inside Trusted Execution Environments (TEEs), specifically targeting AMD SEV-SNP and Intel TDX via Confidential Containers
• Implement the RATS (Remote Attestation Procedures) architecture per RFC 9334 to ensure key shares are released only when the requesting node proves its hardware and software integrity to a Key Broker Service
• Design "Cold Ceremony" workflows that integrate offline hardware tokens as offline Key Encryption Keys (KEKs) for disaster recovery and deep storage
• Write and optimize memory-safe code in Rust or Go that operates on key material exclusively within encrypted memory regions, ensuring zero leakage to the host OS or hypervisor
• Design mechanisms to cryptographically bind business logic approvals (e.g., WebAuthn assertions) directly to the MPC signing session

What you bring

• 5+ years of specialty software engineering experience
• 3+ years of backend or systems programming with expert-level proficiency in Go (Golang)
• 6+ months of experience with Elliptic Curve Cryptography (ECC)
• 1+ year of experience with BFT consensus algorithms, P2P networking, and state replication in reliable distributed systems

Nice to have

• Deep experience with Cosmos SDK and CometBFT, including building custom modules and modifying consensus logic
• Knowledge of Pedersen Commitments and homomorphic encryption properties
• Experience with Zero-Knowledge Proofs, specifically Bulletproofs or Sigma protocols
• Demonstrated ability to read academic whitepapers and preprints and translate mathematical specifications into functioning code
• Experience with Multi-Party Computation (MPC) or Verifiable Secret Sharing (VSS) schemes
• Familiarity with the Ristretto255 curve or libraries like gnark-crypto
• Background in FinTech, payment systems, or high-frequency trading platforms
• Understanding of Account Model versus UTXO Model trade-offs in privacy-preserving ledgers

What we offer

• Base pay of $159,000 to $305,000, with variation based on demonstrated performance, skills, experience, and work location
• Hybrid work schedule
• Health benefits, 401(k) plan, paid time off, disability benefits, life insurance, critical illness insurance, and accident insurance
• Parental leave and critical caregiving leave
• Tuition reimbursement and scholarships for dependent children
• Commuter benefits, discounts and savings, and adoption reimbursement

About Wells Fargo

Wells Fargo is building a Digital Asset Platform for institutional finance that combines applied cryptography with regulatory compliance. The role is based in Columbus, Ohio; Concord, California; Iselin, New Jersey; or New York, New York, with no relocation assistance provided.