Security Architect for Self‑Custody Crypto Wallet

About the role

ITRex is seeking a Security Architect to own security and privacy assurance for a self‑custody crypto wallet during its first delivery phase. The role is preventive and continuous, reporting to the Project Manager/Delivery Lead and working closely with SDK, backend, mobile and DevOps engineers.

Key responsibilities

• Own and extend the threat model across device, backend and third‑party integrations, finalising it before audit‑ready builds.
• Design and implement split‑recovery backup controls, anti‑tamper mechanisms, biometric gating and AML/sanctions screening gates.
• Conduct line‑by‑line security reviews of the signing path and drive mobile hardening (device integrity attestation, jailbreak/root detection, certificate pinning).
• Maintain SAST, secret scanning, SCA and licence scanning in the CI/CD pipeline and produce an SBOM for each release.
• Co‑sign milestone exit checklists, act as technical counterpart to independent auditors and manage remediation of audit findings.

Required profile

• Strong written communication for auditors, counsel and non‑technical stakeholders; English at C1 level.
• Consistent overlap with US Central Time working hours.
• Experience in mobile and application security, applied cryptography, cloud security (AWS), secure SDLC and digital‑asset security.
• Familiarity with compliance frameworks such as ISO/IEC 27001, SOC 2 and NIST CSF.

Required skills

• iOS Secure Enclave, Android Keystore/StrongBox, biometric APIs, platform attestation.
• Mobile reverse‑engineering tools: Frida, objection, MobSF.
• Cryptographic standards: BIP‑32/39/44, ECDSA secp256k1, AES‑GCM, modern KDFs, envelope encryption.
• AWS security services: IAM, KMS, VPC, CloudTrail, GuardDuty.
• OAuth 2.0, OIDC, JWT, JWKS, WebAuthn, API authorisation, rate limiting.
• Threat modelling, secure code review, SAST, DAST, SCA, SBOM generation.
• EVM and Bitcoin transaction structures, ERC‑20, ERC‑4337, smart‑account wallets.

What we offer

• Remote‑first flexibility with trust‑based work environment.
• Competitive salary and benefits package (medical, wellness, learning).
• Opportunities to own problems, AI‑enhanced tooling and professional development.
• Supportive culture with responsive teammates and regular meet‑ups.