Staff Software Engineer Smart Wallet & Account Abstraction

Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game.

For more information, visit xsolla.com.

We are hiring a Staff Software Engineer to own the smart wallet and account abstraction layer of Xsolla ZK, Xsolla's Web3 platform on a zkSync-based L2. This is an individual contributor role with a large technical scope. You are the technical anchor for how millions of players get an on-chain account they never have to think about.

• →

  8+ years of engineering in the Ethereum ecosystem working with crypto wallets and smart wallets

• →

  Designing or operating a production smart wallet or account abstraction system serving real users and real value

• →

  Shipping and operating systems where a bug meant lost funds. You can talk concretely about the guardrails, reviews and rollback paths you put in place

We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play.

• ERC-4337 in depth: EntryPoint (v0.6 through v0.8), the UserOperation lifecycle, bundler and paymaster roles, validation rules (ERC-7562), gas estimation and its failure modes, counterfactual deployment, signature validation for undeployed accounts (ERC-6492)

• EIP-7702 and the post-Pectra landscape: EOA delegation, its interaction with EntryPoint v0.8, and the risks it introduces (residual key authority, delegation phishing, storage collisions)

• Building on or extending production smart account implementations; modular account standards (ERC-7579 / ERC-6900)

• Session keys and delegated permissions: scoped, time-limited, policy-bound authority; TTLs and contract allowlists, origin binding, permission revocation; ERC-7710 / ERC-7715

• Signature schemes and wallet interfaces: EIP-712 typed data, ERC-1271 contract signatures, WebAuthn / passkey (P-256) signers; EIP-1193, EIP-6963, EIP-5792 batched calls, ERC-7677 paymaster interfaces

• Solidity and the EVM: reading, reviewing and writing account, paymaster and module contracts; gas-aware design; upgradeability and migration patterns; working effectively with external auditors

• L2 specifics and their effect on wallet design: native account abstraction on zkSync-family chains, transaction and fee models, finality and reorg behavior, RPC and indexer semantics

• Go: idiomatic code, concurrency patterns, performance profiling

• TypeScript and SDK design: client-side SDK surfaces that internal and external teams build on

• Distributed systems and their trade-offs (consistency, availability, failure modes); reconciling off-chain state against an authoritative on-chain result

• PostgreSQL: schema design, query optimization, migrations at scale

• Kubernetes: deploying, operating and debugging services

• Asynchronous messaging and event-driven design (Kafka or NATS): consumer groups, at-least-once delivery

• Git, CI/CD

• Key management in production: platform secure storage (Keychain / Keystore), HSMs, MPC or threshold signing, and the operational discipline around each

• Wallet threat modeling: signature and delegation phishing, malicious dApp origins, replay and cross-chain replay, token approval abuse, paymaster griefing and DoS

• Leading multi-quarter technical initiatives across teams

• Influencing architecture and standards beyond your immediate team

• RFCs and design docs that stand on their own and are actionable without you in the room

• Daily hands-on use of AI coding tools (Claude Code, Codex, Cursor) for development and review, including configuring them for a repository

• English at C1 level

• Location: Remote 

• Employment Type: Full-time

• Schedule: 10:00–19:00 (flexible)