About Xsolla
Xsolla is a global commerce company that provides tools and services to help video game developers fund, distribute, market, and monetize their games. It operates as a merchant of record and supports game developers worldwide.
Responsibilities
•Own the technical strategy and architecture of the smart wallet platform, including the account model, signing, session management, and gas abstraction at scale
•Design and evolve the ERC-4337 user operation lifecycle, EIP-7702 delegation, deterministic identity-based address derivation, session keys, and permission primitives
•Set the paymaster and gas-sponsorship strategy, including sponsorship scope, metering, caps, abuse prevention, and fallback behavior
•Own the security model for interactions between the signer and third-party applications, including provider behavior, origin-bound sessions, trust tiers, and transaction and signature confirmations
•Lead the custody roadmap toward MPC-based custody and design recovery paths using passkeys, guardians, and social recovery
•Drive cross-team decisions on account architecture, SDK contracts, data modeling, and platform reliability, and build alignment across relevant teams
•Identify systemic risks and lead initiatives to resolve them before they become incidents
•Define engineering standards, review critical code, contracts, and designs, and support the broader engineering organization through documentation, tooling, and mentorship
•Align roadmaps with product, security, legal, and infrastructure stakeholders and translate business and regulatory needs into technical plans
•Serve as the escalation point for complex production issues in the wallet and account abstraction domain
Requirements
•Deep hands-on understanding of ERC-4337, including EntryPoint, UserOperation lifecycle, bundlers, paymasters, validation rules, gas estimation, counterfactual deployment, and signature validation for undeployed accounts
•Working knowledge of EOA delegation, EIP-7702, its interaction with ERC-4337 EntryPoint v0.8, and related trade-offs and risks
•Experience building or extending production smart account implementations and familiarity with modular account standards
•Experience designing scoped, time-limited, policy-bound session keys and delegated permissions
•Practical knowledge of EIP-712, ERC-1271, WebAuthn/passkey signers, and wallet-facing standards
•Experience designing or operating a production smart wallet or account abstraction system serving real users and real value
•Substantial engineering experience at a large crypto product or protocol organization, or a comparable wallet, exchange, or account-abstraction infrastructure team where wallet correctness and custody were core to the product
•Experience shipping and operating systems where bugs could cause lost funds, including establishing guardrails, reviews, and rollback paths
•Ability to read, review, and write Solidity account, paymaster, and module contracts; knowledge of gas-aware design, upgradeability, migration patterns, and working with external auditors
•Understanding of L2 execution differences and their impact on wallet design, transaction and fee models, finality, reorg behavior, RPC, and indexer semantics
•Strong Go engineering skills, including idiomatic code, concurrency, and performance profiling
•Ability to design and own client-side TypeScript SDK surfaces for internal and external engineering teams
•Experience with distributed systems, their trade-offs and failure modes, and reconciling off-chain state against authoritative on-chain results
•Knowledge of PostgreSQL schema design, query optimization, and large-scale migrations
•Experience deploying, operating, and debugging services in Kubernetes
•Experience with Kafka or NATS, event-driven patterns, consumer groups, and at-least-once delivery
•Knowledge of Git and modern CI/CD practices
•Hands-on experience with production key material, including secure platform storage, HSMs, MPC or threshold signing, and associated operational practices
•Solid understanding of wallet attack surfaces, including phishing, malicious dApp origins, replay attacks, token approval abuse, and paymaster griefing and denial of service
•Proven ability to lead multi-quarter technical initiatives across teams and influence architecture and standards beyond the immediate team
•Strong written and verbal communication skills; able to write actionable RFCs and design documents
Nice to have
•Experience in the video game industry or building platforms for game developers, publishers, or players
•Hands-on experience with the zkSync/Elastic Chain ecosystem
•Experience with embedded and ecosystem wallet providers or account-abstraction infrastructure vendors
•Experience with MPC/threshold custody, social recovery, or guardian-based recovery
•Experience with NFT and token infrastructure at scale
•Contributions to open-source wallet, security, or identity projects, including ERC/EIP standards
•Familiarity with crypto compliance requirements
•Experience with identity and authentication integrations for wallet derivation
•Platform or infrastructure engineering background
•Experience owning a mobile wallet surface
•Hands-on experience with modern AI tools for engineering work
Conditions
•Medical, dental, and vision benefits
•Paid time off
•Personalized career roadmap
•Training and educational opportunities
