Staff Software Engineer

Join Ripple's Custody Platform Engineering team to build secure enclave-based platforms protecting critical cryptographic operations. The role combines distributed systems, applied cryptography, cloud infrastructure, and security engineering with hands-on technical leadership.

Responsibilities

• Design, build, and operate secure enclave infrastructure for cryptographic workloads.
• Develop reliable, observable platform abstractions for enclave-based deployment.
• Evaluate and integrate trusted execution technologies across cloud providers.
• Build secure communication patterns between enclaves and external services, including attestation and encrypted channels.
• Define secure architectures for custody-critical systems with cross-functional engineering teams.
• Lead threat modeling, design reviews, and implementation reviews.
• Improve deployment, monitoring, incident response, key rotation, recovery, and disaster readiness.
• Mentor senior engineers and influence technical direction.
• Contribute to security standards, engineering guidelines, and platform strategy.

Requirements

• 10+ years building production software, infrastructure, or distributed systems in security-sensitive, high-reliability environments.
• Experience with enclave-based or confidential computing platforms such as AWS Nitro Enclaves, Google Confidential Computing, IBM HPVS, Azure Confidential Computing, Intel SGX, AMD SEV-SNP, or Intel TDX.
• Strong programming experience in Rust, Go, C, C++, or Java.
• Experience protecting secrets, cryptographic keys, signing material, or privileged workloads.
• Strong understanding of encryption, digital signatures, key management, secure channels, attestation, and data protection.
• Deep knowledge of Linux, operating systems, networking, process isolation, and hardened runtimes.
• Experience with cloud-native infrastructure, observability, service identity, access control, and incident response.
• Ability to reason about trust boundaries, threat models, failure modes, and defense in depth.
• Experience leading cross-team technical projects, defining architecture, guiding implementation, and mentoring engineers.
• Preferred experience with kernel customization, minimal operating environments, OS hardening, hardware, virtualization, or hypervisor boundaries.
• Preferred experience with HSMs, MPC, threshold signing, key ceremonies, custody, wallet, payment, or blockchain infrastructure.

Benefits

• Professional development budget
• Flexible in-office collaboration schedule
• Bi-weekly all-company meeting
• Team offsites, team bonding activities, and happy hours
• Bonuses and equity
• Health, retirement, family forming, and family support benefits
• Employee giving match
• Mobile phone stipend
• R&R days
• Wellness reimbursement and weekly onsite and virtual programming
• Generous vacation policy
• Parental leave and family planning benefits
• Catered lunches and fully stocked kitchens