Вакансии

Who we're looking for: founders from the EECA region with an MVP (or very close to one) who are serious about growing in Europe and beyond.

Location: Europe; Canada Workplace: hybrid ABOUT YOU We are looking for a Senior QA Engineer who has tested real on-chain products — the contracts and the transactions, not only the web app in front of them. You will own quality for Xsolla's smart wallet on Xsolla ZK , our Ethereum-compatible ZK rollup: the wallet players use to hold, receive and send tokens and in-game items, signing in with the account they already have. The work runs on both sides of the chain. On the backend, you will confirm that a wallet address pre-computed from a salt is the address that actually gets deployed. On the frontend, you will follow a signed operation from the client's RPC call through the bundler to finality, and prove it landed, failed or reverted the way it should. You will fork the chain to test against real state, deploy and call contracts from the command line, and turn what you learn into automated suites. You will work in a small, senior engineering team alongside an external wallet-infrastructure partner. You can tell a defect in our code from one in a partner SDK or in the chain itself — and you bring the evidence to show which. AI coding tools are part of how you work every day, and you set them up so the rest of the team gets the same leverage. ABOUT US Xsolla is a global commerce company with robust tools and services designed to help developers solve the inherent challenges of the video game industry. From indie to AAA studios, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in a strong belief in the future of video games, Xsolla is resolute in its mission to bring opportunities together and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as a merchant of record and has helped more than 1,500 game developers reach more players and grow their businesses worldwide. With more paths to profit and ways to win, developers have everything they need to enjoy the game. For more information, visit xsolla.com . WHAT YOU WILL WORK ON A consumer smart wallet built on account abstraction, so players can own and use digital items without managing keys or gas themselves. Integrations with an external wallet-infrastructure partner and with Xsolla's existing player products. Taking the wallet from testnet to a production launch on an Ethereum-compatible Layer 2. RESPONSIBILITIES Own the end-to-end test strategy for the wallet: sign-in, wallet creation, asset display, send and receive, and transaction confirmation on Xsolla ZK . Test account-abstraction flows: UserOperation construction and validation, bundler submission, EntryPoint execution, paymaster-sponsored gas, and session-key and signer behaviour. Test signing end to end: personal_sign and EIP-712 typed-data requests through the EIP-1193 provider, and signature validation by the wallet contract (ERC-1271), including before the wallet is deployed. Verify counterfactual deployment: that the address derived with CREATE2 from the factory, salt and init code matches the deployed wallet contract, on a forked or local chain, before it reaches mainnet. Deploy, call and inspect smart contracts from the command line to set up test state and reproduce defects. Use chain-forking and simulation tools to test against real network state without real funds, and trace failed transactions to their root cause. Validate the full transaction lifecycle — broadcast, inclusion, reorgs and finality — and its failure paths: reverts, failed UserOperations, insufficient balance, expired session keys, ownership changing mid-flight, and bundler errors. Reconcile what players see with on-chain state: indexer balances and NFT ownership against contract state, including when the indexer lags or diverges, and the account-to-wallet records behind Xsolla ID. Test transfers and approvals across ERC-20, ERC-721 and ERC-1155, including partial ERC-1155 quantities and safe transfers into contract wallets. Write acceptance tests for a partner's wallet SDK and contracts, and report integration defects with the evidence needed to route them to the right owner. Build and maintain automation: Playwright for wallet UI flows, and scripted on-chain checks in TypeScript that run in CI. Set up and maintain AI tooling in the test repositories (Claude Code, Codex, Cursor: rules, context, harness) so QA and engineers use it effectively. Plan and run testnet-to-mainnet release validation, including contract deployment verification and post-deploy smoke checks. Work with security on signing, key handling and key-export flows, and test for signature replay, typed-data phishing and token approval abuse. Mentor QA engineers who are new to Web3, and raise on-chain testing practice across teams. QUALIFICATIONS Required experience Bachelor's degree in Computer Science, Software Engineering, Information Systems or a related field (or international equivalent). 6+ years in software testing or quality engineering, including 2+ years of hands-on testing on EVM -based products. Web3 libraries and tooling Hands-on work with viem and wagmi (ethers.js also counts): reading contract state, sending transactions, and decoding events and revert errors from test code. Deploying and interacting with smart contracts from the command line with Foundry (forge, cast, anvil) or Hardhat; able to read Solidity well enough to know what a contract is meant to do. Chain forking and simulation with Anvil, Tenderly or similar tools, and tracing a failed transaction from a block explorer or transaction trace down to its revert reason. On-chain fundamentals A working model of Ethereum transactions: nonces, gas, receipts, events and logs, reverts, reorgs and finality — including the gap between a sequencer confirmation and L1 finality on a rollup — and how indexers can lag or diverge from chain state. Token standards: ERC-20, ERC-721 and ERC-1155 mechanics, including approvals and the safe-transfer callbacks a contract wallet must implement to receive NFTs. How wallet signers work: EOAs, embedded wallets and smart accounts; personal_sign (EIP-191) and typed data (EIP-712); the EIP-1193 provider; signature validation for contract accounts (ERC-1271). Practical understanding of account abstraction (ERC-4337): UserOperations, bundlers, the EntryPoint, paymasters, counterfactual deployment and CREATE2 address derivation, and session keys. Wallet security basics: signature replay and cross-chain replay, phishing via typed-data signing, and token approval abuse — and how to design test cases that catch them. Testing and automation Test automation in TypeScript or JavaScript, and UI automation with Playwright or a similar framework. API testing over REST and JSON- RPC , including bundler methods (eth_sendUserOperation, eth_estimateUserOperationGas, eth_getUserOperationReceipt), and basic SQL. Daily hands-on use of AI coding tools (Claude Code, Codex, Cursor) for test design, automation and review — generating test cases from specs, analysing logs and transaction traces — including configuring them for a repository. Ways of working Able to run complex, high-impact testing with minimal supervision and wide latitude for independent judgment. Excellent written and spoken English, and proven collaboration in cross-functional teams across time zones. Preferred Experience on a wallet, decentralized exchange or NFT marketplace. ZK Stack and zk -rollups: native account abstraction and paymaster flows on zkSync-family chains, and how finality, gas and EVM compatibility differ from Ethereum mainnet. Embedded, MPC or white-label wallet SDK integrations. EIP-7702 delegation, and ERC-6492 signature validation for accounts that are not yet deployed. Writing on-chain tests in Foundry, including fuzz and invariant tests; familiarity with OpenZeppelin contracts and the ERC-4337 reference implementation. Consumer-scale or gaming products. Reading Go. Load and performance testing of high-volume transaction flows, for example with k6. BENEFITS We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO , and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. EQUAL EMPLOYMENT OPPORTUNITY STATEMENT Xsolla is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, or any other characteristic protected by law. We consider qualified applicants with criminal histories in accordance with the Fair Chance Act. CRIMINAL HISTORY CONSIDERATION For the Senior QA Engineer, Web3 (Smart Wallets), we will conduct a background check that may include the following: Criminal history check Employment verification Education verification Relevance to Job Responsibilities: The background check is relevant to this position because of the following role responsibilities: Accessing confidential company data Ensuring compliance with regulatory requirements Rights Under the Fair Chance Act: Applicants are encouraged to inquire about their rights under the Fair Chance Act. If you have questions regarding our hiring practices, please contact careers@xsolla.com. By submitting the following job application form, you consent to Xsolla processing your data for career-related inquiries and potential employment opportunities. We process your data in accordance with the Xsolla Privacy Notice for Job Applicants. Please direct any inquiries regarding your data privacy to careers@xsolla.com.

Location: Canada Workplace: remote About Xsolla Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. About the Role We're looking for a Staff Engineer to own the smart wallet and account abstraction layer of Xsolla's Web3 platform. This is an individual contributor role with outsized technical scope: you'll be the technical anchor for how millions of players get an on-chain account they never have to think about — setting direction, making hard architectural calls, and raising the bar across the org. Concretely, you'll own the account model behind Xsolla ZK, our zkSync-based L2, and the wallet that sits inside Xsolla App. Every player who signs in with Xsolla ID receives a deterministic, non-custodial smart account — derived from their identity claim, identical on every device, with private keys that never leave the client. That account is not a separate "wallet" screen: it is the player's inventory, and it backs minting, gifting, trading on our Bazaar marketplace, Merkle-based reward airdrops, gas sponsorship, and an in-app dApp browser that exposes the same signer to third-party applications through an EIP-1193 provider. You'll own the primitives underneath all of it: the ERC-4337 user operation lifecycle, EIP-7702 delegation, session keys and origin-bound Smart Sessions, paymaster and gas abstraction strategy, and the custody and recovery roadmap — including the move from raw key export to MPC custody. You will own the strategy behind account abstraction, signing, and session management at scale, and evolve our smart account and permissioning model to meet both product and compliance needs. You operate with significant autonomy, but your decisions ripple across teams — so you'll spend real time building buy-in with engineering, product, security, and legal stakeholders, not just designing in isolation. You are technically deep, calm under pressure, and comfortable being the escalation point when production wallet issues get hard — because in this domain, "hard" means a stuck user operation, a drained paymaster, or a signing prompt a player didn't understand. You write the RFCs and design docs that people actually read, and you create leverage for the broader engineering org through documentation, tooling, and mentorship — without needing a management title to do it. Responsibilities Own Smart Wallet & AA Architecture — Own the technical strategy and architecture of our smart wallet platform, covering the account model, signing, session management, and gas abstraction at scale. Design the Account & Signing Model — Design and evolve our ERC-4337 user operation lifecycle (prepare → sign → submit → confirm), EIP-7702 delegation, deterministic address derivation from identity, and the session-key and permission primitives that let players act without a prompt on every transaction. Own Gas Abstraction — Set the paymaster and gas-sponsorship strategy: what we sponsor, how we meter and cap it, how we defend it from abuse, and how it degrades when sponsorship is unavailable. Harden the dApp-Facing Surface — Own the security model where our signer meets third-party applications: EIP-1193 / EIP-6963 provider behavior, origin-bound and policy-versioned sessions, trust tiers, and the transaction and signature confirmation flow. Define what a player is actually approving, and make sure the UI can prove it. Drive Custody & Recovery — Lead the custody roadmap from today's interim mechanisms toward MPC-based custody, and design recovery paths (passkeys, guardians, social recovery) that a non-crypto-native player can complete without losing assets. Drive Cross-Team Technical Decisions — Drive decisions on account architecture, SDK contracts, data modeling, and platform reliability, and build buy-in across the wallet, marketplace, SDK, mobile, and security teams. De-Risk Proactively — Identify systemic risks — key management, signature phishing, reorgs and indexer staleness, bundler and RPC dependencies, contract upgrade paths — and lead initiatives to resolve them before they become incidents. Set Engineering Standards — Define engineering standards, review critical code, contracts, and designs, and create leverage for the team through documentation, tooling, and mentorship. Align with Stakeholders — Collaborate with product, security, legal, and infra teams to align on roadmap and translate business and regulatory needs into well-scoped technical plans. Own Production Escalations — Serve as the go-to escalation point for complex production issues in the wallet and account abstraction domain. What You Bring Account Abstraction & Smart Wallets ERC-4337 Depth — Deep, hands-on understanding of ERC-4337: EntryPoint (v0.6 through v0.8), the UserOperation lifecycle, bundler and paymaster roles, validation rules (ERC-7562), gas estimation and its failure modes, counterfactual deployment, and signature validation for undeployed accounts (ERC-6492). EIP-7702 & the Post-Pectra Landscape — Working knowledge of EOA delegation, its interaction with ERC-4337 EntryPoint v0.8, and the trade-offs and risks it introduces (residual key authority, delegation phishing, storage collisions). Smart Account Implementations — Experience building on or extending production smart account implementations (Safe, Kernel, Biconomy, Coinbase Smart Wallet, or equivalent), and familiarity with modular account standards (ERC-7579 / ERC-6900). Session Keys & Delegated Permissions — Experience designing scoped, time-limited, policy-bound authority: session keys with TTL and contract allowlists, origin binding, permission revocation, and delegated-permission standards (ERC-7710 / ERC-7715). Signature Schemes & Wallet Interfaces — Practical command of EIP-712 typed data, ERC-1271 contract signatures, WebAuthn / passkey (P-256) signers, and the wallet-facing standards: EIP-1193, EIP-6963, EIP-5792 batched calls, ERC-7677 paymaster interfaces. Production Wallet Experience — Experience designing or operating a production smart wallet or account abstraction system serving real users and real value. Production Crypto Track Record Scale in a Major Crypto Organization — Substantial engineering experience at a large crypto product or protocol organization — for example Coinbase, Kraken, Base, Safe, the Ethereum Foundation, Consensys / MetaMask — or a comparable wallet, exchange, or account-abstraction infrastructure team where wallet correctness and custody were core to the product. Operational Judgment Under Value at Risk — You have shipped and operated systems where a bug meant lost funds, and you can talk concretely about the guardrails, reviews, and rollback paths you put in place. Smart Contracts & EVM Solidity & EVM Fluency — Ability to read, review, and write account, paymaster, and module contracts; gas-aware design; upgradeability and migration patterns; working effectively with external auditors. L2 Specifics — Understanding of L2 execution differences and how they affect wallet design: native account abstraction on zkSync-family chains, transaction and fee models, finality and reorg behavior, and RPC and indexer semantics. Backend Engineering Go Engineering — Strong Go (Golang) engineering skills: idiomatic code, concurrency patterns, performance profiling. TypeScript & SDK Design — Ability to design and own client-side SDK surfaces in TypeScript that other engineering teams — internal and external — build on top of. Distributed Systems — Experience with distributed systems and their trade-offs (consistency, availability, failure modes), and with reconciling off-chain state against an authoritative on-chain result. Data & Infrastructure PostgreSQL — Schema design, query optimization, migrations at scale. Kubernetes — Deploying, operating, and debugging services in a k8s environment. Message Streaming — Kafka or NATS — event-driven patterns, consumer groups, at-least-once delivery. Git & CI/CD — Git and modern CI/CD practices. Security Key Management — Hands-on experience with key material in production: platform secure storage (Keychain / Keystore), HSMs, MPC or threshold signing, and the operational discipline around each. Wallet Threat Modeling — Solid grasp of the wallet attack surface: signature and delegation phishing, malicious dApp origins, replay and cross-chain replay, token approval abuse, and paymaster griefing and DoS. Leadership Cross-Team Initiative Leadership — Proven ability to lead multi-quarter technical initiatives across teams. Architectural Influence — Track record of influencing architecture and standards beyond your immediate team. Written & Verbal Communication — You write RFCs and design docs that people actually read. Nice to Have Experience working in the video game industry, building or operating platforms for game developers, publishers, or players Hands-on experience with the zkSync / Elastic Chain ecosystem (ZKsync OS, Matter Labs stack, native AA and paymaster flows, custom L2 operations) Experience with embedded and ecosystem wallet providers or AA infrastructure vendors (thirdweb, Privy, Dynamic, Turnkey, Pimlico, Alchemy, Biconomy, ZeroDev, Safe{Core}) — and clear views on where to build versus buy Experience with MPC / threshold custody, social recovery, or guardian-based recovery in a consumer product Experience with NFT and token infrastructure at scale: ERC-721 / ERC-1155 / ERC-20 mechanics, marketplace contracts, Merkle-based airdrop and claim distribution, chain indexing services Contributions to open-source wallet, security, or identity projects — including authorship or review of ERC / EIP standards Familiarity with compliance requirements relevant to crypto consumer products: KYC / AML, geofencing, MiCA, SOC 2, ISO 27001, GDPR data minimization, audit logging Experience with identity and auth integration for wallet derivation (OAuth 2.0 / OIDC, JWT verification, token scoping) Background in platform or infrastructure engineering — building systems other engineers build on top of Experience owning a mobile wallet surface (React Native / Expo, WebView provider injection, native signing UI) Hands-on, up-to-date experience with modern AI tools (e.g. Claude, Copilot, Cursor) for code generation, review, and accelerating day-to-day engineering work How We Work Xsolla operates across multiple time zones, and the smart wallet underpins identity, ownership, and value transfer for every Web3 product we ship. Strong written communication is essential — your architectural decisions and designs need to stand on their own and be actionable without you in the room. We value directness, technical depth, and follow-through. In this domain that means saying plainly when a design has custody, security, or reversibility implications, defending your position with evidence, and staying engaged until it's resolved. Where a decision touches player funds or key material, we expect the conservative call to be argued for explicitly rather than assumed. Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we’re not just building a business; we’re cultivating a community that values creativity, collaboration, and the transformative power of play.

Location: Russia; Perm; Moscow Workplace: remote ABOUT US Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. THE ROLE We are hiring a Team Lead, Web3 to lead a cross-functional team of frontend, backend, smart contract and QA engineers in XsollaZK, Xsolla's Web3 ecosystem on a zkSync-based L2. Your team builds: smart wallets built on account abstraction; SDKs that game studios and partners use to bring players on-chain; infrastructure backend services for tokenizing in-game items and currencies; ecosystem dApps: a DEX, an NFT marketplace and an auction. This is a management role. Most of your time goes to people and delivery: building the team, growing engineers, and making delivery predictable. The rest goes to technical leadership: architecture, reviews and hands-on code where it matters. Responsibilities WHAT YOU WILL OWN The team: hiring, onboarding, growth and performance of frontend, backend, smart contract and QA engineers Delivery: predictable commitments, a sustainable pace and the quality of what the team ships How the team works: processes, engineering standards and an AI-assisted workflow Relationships with Product, DevOps and other Xsolla product teams: priorities, dependencies and expectations The technical direction of the team's product area: on-chain / off-chain architecture and key technical decisions, justified in writing Security and reliability of what the team ships: signing flows, contracts that hold user assets, production operation and the team's on-call rotation WHAT YOU WILL DO People Set clear goals and expectations for each engineer Run regular 1:1s, performance reviews and career development conversations; give direct feedback and address underperformance Hire engineers across disciplines: define roles, run interviews and onboard new people Grow engineers through mentoring and build the team's next leaders Build a culture of technical excellence, collaboration and continuous learning Delivery Work with Product to shape requirements, estimate and plan work Manage scope, workload, risks and dependencies so the team delivers on its commitments Report progress, risks and blockers to stakeholders Lead the team through production incidents and post-mortems Continuously improve development processes and team efficiency Technical leadership Review architecture and critical code across backend, frontend and smart contracts, with a focus on edge cases specific to Xsolla products: smart wallets, tokenization of in-game items and currencies, marketplace and auction flows Lead key decisions on smart wallet integration (UserOperations, paymaster and gas sponsorship), session keys and the signing flow Identify systemic risks (key management, signature phishing, bundler and RPC dependencies) and make sure they are addressed before they become incidents Contribute hands-on to critical features when needed Set up AI tooling in the repositories (Claude Code, Codex, Cursor: rules, context, harness) and drive its adoption across the team REQUIRED Management experience 5+ years of engineering management experience Managing cross-functional teams that combine several disciplines (for example frontend, backend, smart contracts and QA) Teams you led shipped dApps to production and maintained them People leadership Hiring and building teams: defining roles, running interviews, onboarding Performance management: setting goals, giving feedback, running performance reviews, handling underperformance Growing engineers: career plans, mentoring Delivery and stakeholders Delivery planning: estimation, sprint planning, managing scope, risks and dependencies Working with Product and other teams on priorities and trade-offs; explaining technical trade-offs to non-technical stakeholders Leading a team through production incidents and post-mortems Balancing management with hands-on technical work Technical depth A strong technical background: hands-on engineering experience across the Web3 stack, deep enough to lead technical decisions and review work on each layer: Web3 libraries and wallets: viem and wagmi in production; how wallet signers work (EOAs, browser and embedded wallets, smart accounts, EIP-191, EIP-712, EIP-1193); smart wallets (UserOperations, paymasters, ERC-1271) Backend: Go and TypeScript (Node.js); processing on-chain events (idempotency, reorgs, retries); asynchronous messaging (Kafka, RabbitMQ or NATS ); PostgreSQL and Redis; REST and gRPC API design Frontend: React and TypeScript; web security fundamentals ( XSS , CSRF , CSP , safe handling of signatures and keys in the browser) Smart contracts: reading Solidity and the EVM (storage, gas, proxy upgrade patterns, access control); common vulnerability classes (reentrancy, front-running / MEV , oracle manipulation, signature replay) Operations: Docker, Kubernetes, CI/CD; observability (we use Datadog; experience with Prometheus, Grafana, ELK / Graylog or OpenTelemetry also counts) AI-assisted engineering Daily hands-on use of AI coding tools (Claude Code, Codex, Cursor) for development and review, including configuring them for a repository English Spoken English at B2 level or higher Nice to Have ZK Stack and zk -rollups: EraVM vs EVM , system contracts (ContractDeployer, NonceHolder), L1↔L2 messaging, bridging and finality Smart contract development in Solidity with Foundry Deeper account abstraction: ERC-4337 EntryPoint versions and validation rules (ERC-7562, ERC-6492), modular accounts (ERC-7579 / ERC-6900), session keys and delegated permissions (ERC-7710 / ERC-7715), EIP-7702 Hands-on experience with wallet and AA infrastructure technologies (Sequence, thirdweb, Privy, Dynamic, Turnkey, Pimlico, Alchemy, ZeroDev, Safe{Core}), with clear views on build versus buy Key management: HSM , MPC / threshold signing, social or guardian-based recovery DeFi ( DEX , AMM ) and NFT marketplaces (ERC-721, ERC-1155, auctions) go-ethereum and abigen Managing distributed or remote teams Gaming or fintech experience with high-load systems HOW WE WORK Decisions in writing. Significant technical decisions are written up as an RFC or ADR that lays out the options and trade-offs. We discuss the document, not a blank whiteboard. AI is part of everyday engineering. We use AI coding tools for development and review, and we treat configuring them for a codebase as real engineering work. HOW WE HIRE Intro call. Your background, your motivation and the role. Technical interview. Built on the Technical depth part of the Required section and the technical items in What you will own . People and delivery. Built on the Management experience , People leadership and Delivery and stakeholders parts of Required : real situations from your experience with hiring, performance, delivery and incidents. Bar raiser. An engineer from outside the hiring team checks that you raise the overall engineering bar. BENEFITS We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. EMPLOYMENT DETAILS Location: Remote  Employment Type: Full-time Schedule: 10:00–19:00 (flexible) Contract: Employment agreement (entity or EOR arranged per candidate location) EQUAL EMPLOYMENT STATEMENT Xsolla is dedicated to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, language, sexual orientation, national origin, genetics, political beliefs, disability, age, marital status, social background or other characteristics. We are committed to compliance with all fair employment practices regarding citizenship and immigration status. CONTACT If you have questions regarding our hiring practices, please contact careers@xsolla.com. For more vacancies, visit xsolla.com/careers.

Location: Russia; Moscow; Perm Workplace: remote About Xsolla Xsolla is a global commerce company with robust tools and services to help developers solve the inherent challenges of the video game industry. From indie to AAA, companies partner with Xsolla to help them fund, distribute, market, and monetize their games. Grounded in the belief in the future of video games, Xsolla is resolute in the mission to bring opportunities together, and continually make new resources available to creators. Headquartered and incorporated in Los Angeles, California, Xsolla operates as the merchant of record and has helped over 1,500+ game developers to reach more players and grow their businesses around the world. With more paths to profits and ways to win, developers have all the things needed to enjoy the game. For more information, visit xsolla.com. About the Role We are hiring a Staff Software Engineer to own the smart wallet and account abstraction layer of XsollaZK, Xsolla's Web3 platform on a zkSync-based L2. This is an individual contributor role with a large technical scope. You are the technical anchor for how millions of players get an on-chain account they never have to think about. The product. Every player who signs in with Xsolla ID receives a deterministic, non-custodial smart account. The account is derived from their identity claim, is identical on every device, and its private keys never leave the client. It is not a separate wallet screen: it is the player's inventory. It backs: minting and gifting; trading on our Bazaar marketplace; Merkle-based reward airdrops; gas sponsorship; an in-app dApp browser that exposes the same signer to third-party applications through an EIP-1193 provider. Responsibilities The technical strategy and architecture of the smart wallet platform: account model, signing, session management and gas abstraction at scale The smart account and permissioning model, evolved to meet both product and compliance needs The security model where our signer meets third-party applications: what a player is actually approving, and proof that the UI shows it The custody and recovery roadmap, from today's interim mechanisms (including raw key export) to MPC -based custody Cross-team technical decisions on account architecture, SDK contracts, data modeling and platform reliability, with buy-in from the wallet, marketplace, SDK, mobile and security teams Engineering standards in the Web3 domain Production escalations in the wallet and account abstraction domain WHAT YOU WILL DO Design and evolve the ERC -4337 user operation lifecycle (prepare → sign → submit → confirm), EIP -7702 delegation, deterministic address derivation from identity, and the session-key and permission primitives (including origin-bound Smart Sessions) that let players act without a prompt on every transaction Set the paymaster and gas-sponsorship strategy: what we sponsor, how we meter and cap it, how we defend it from abuse, and how it degrades when sponsorship is unavailable Define EIP -1193 / EIP -6963 provider behavior, origin-bound and policy-versioned sessions, trust tiers, and the transaction and signature confirmation flow Design recovery paths (passkeys, guardians, social recovery) that a non-crypto-native player can complete without losing assets Identify systemic risks (key management, signature phishing, reorgs and indexer staleness, bundler and RPC dependencies, contract upgrade paths) and lead initiatives that resolve them before they become incidents Write RFCs and design docs; review critical code, contracts and designs Work with product, security, legal and infra teams to align on the roadmap and turn business and regulatory needs into well-scoped technical plans Create leverage for the engineering org through documentation, tooling and mentorship Serve as the escalation point for complex production issues: a stuck user operation, a drained paymaster, a signing prompt a player didn't understand Set up and maintain AI tooling in the repositories (Claude Code, Codex, Cursor: rules, context, harness) so the team uses it effectively REQUIRED Experience 8+ years of engineering in the Ethereum ecosystem working with crypto wallets and smart wallets Designing or operating a production smart wallet or account abstraction system serving real users and real value Shipping and operating systems where a bug meant lost funds. You can talk concretely about the guardrails, reviews and rollback paths you put in place Account abstraction and smart wallets ERC -4337 in depth: EntryPoint (v0.6 through v0.8), the UserOperation lifecycle, bundler and paymaster roles, validation rules ( ERC -7562), gas estimation and its failure modes, counterfactual deployment, signature validation for undeployed accounts ( ERC -6492) EIP -7702 and the post-Pectra landscape: EOA delegation, its interaction with EntryPoint v0.8, and the risks it introduces (residual key authority, delegation phishing, storage collisions) Building on or extending production smart account implementations; modular account standards ( ERC -7579 / ERC -6900) Session keys and delegated permissions: scoped, time-limited, policy-bound authority; TTLs and contract allowlists, origin binding, permission revocation; ERC -7710 / ERC -7715 Signature schemes and wallet interfaces: EIP -712 typed data, ERC -1271 contract signatures, WebAuthn / passkey (P-256) signers; EIP -1193, EIP -6963, EIP -5792 batched calls, ERC -7677 paymaster interfaces Smart contracts and EVM Solidity and the EVM : reading, reviewing and writing account, paymaster and module contracts; gas-aware design; upgradeability and migration patterns; working effectively with external auditors L2 specifics and their effect on wallet design: native account abstraction on zkSync-family chains, transaction and fee models, finality and reorg behavior, RPC and indexer semantics Backend Go: idiomatic code, concurrency patterns, performance profiling TypeScript and SDK design: client-side SDK surfaces that internal and external teams build on Distributed systems and their trade-offs (consistency, availability, failure modes); reconciling off-chain state against an authoritative on-chain result Data and infrastructure PostgreSQL: schema design, query optimization, migrations at scale Kubernetes: deploying, operating and debugging services Asynchronous messaging and event-driven design (Kafka or NATS ): consumer groups, at-least-once delivery Git, CI/CD Security Key management in production: platform secure storage (Keychain / Keystore), HSMs, MPC or threshold signing, and the operational discipline around each Wallet threat modeling: signature and delegation phishing, malicious dApp origins, replay and cross-chain replay, token approval abuse, paymaster griefing and DoS Leadership Leading multi-quarter technical initiatives across teams Influencing architecture and standards beyond your immediate team RFCs and design docs that stand on their own and are actionable without you in the room AI-assisted engineering Daily hands-on use of AI coding tools (Claude Code, Codex, Cursor) for development and review, including configuring them for a repository English English at C1 level Nice to Have Hands-on experience with ZK Stack and zk -rollups Hands-on experience with embedded and ecosystem wallet and AA infrastructure technologies (thirdweb, Privy, Dynamic, Turnkey, Pimlico, Alchemy, Biconomy, ZeroDev, Safe{Core}), with clear views on build versus buy MPC / threshold custody, social recovery or guardian-based recovery in a consumer product NFT and token infrastructure at scale: ERC -721 / ERC -1155 / ERC -20 mechanics, marketplace contracts, Merkle-based airdrop and claim distribution, chain indexing services Contributions to open-source wallet, security or identity projects, including authoring or reviewing ERC / EIP standards Compliance requirements for crypto consumer products: KYC / AML , geofencing, MiCA , SOC 2, ISO 27001, GDPR data minimization, audit logging Identity and auth integration for wallet derivation: OAuth 2.0 / OIDC , JWT verification, token scoping Platform or infrastructure engineering: building systems other engineers build on Owning a mobile wallet surface: React Native / Expo, WebView provider injection, native signing UI Gaming industry experience: platforms for game developers, publishers or players How We Work Decisions in writing. Significant technical decisions are written up as an RFC or ADR that lays out the options and trade-offs. We work across time zones, so a design has to stand on its own. AI is part of everyday engineering. We use AI coding tools for development and review, and we treat configuring them for a codebase as real engineering work. HOW WE HIRE Intro call. Your background, your motivation and the role. Technical interview. Built directly on the What you will own and Required sections above. We won't ask about anything this posting doesn't promise. System design. You design part of a wallet or account abstraction platform end to end and walk us through the trade-offs. Bar raiser. An engineer from outside the hiring team checks that you raise the overall engineering bar. Benefits We are passionate about fostering a supportive environment for our team, so we prioritize the physical, mental, and emotional well-being of our employees and their families through a comprehensive Benefits Program. This includes medical, dental, and vision, PTO, and a personalized career roadmap for each employee. By investing in professional development through training and educational opportunities, we ensure that our team thrives both personally and professionally. Together, we're not just building a business; we're cultivating a community that values creativity, collaboration, and the transformative power of play. EMPLOYMENT DETAILS Location: Remote  Employment Type: Full-time Schedule: 10:00–19:00 (flexible)