IntellectEU is looking for a Blockchain Engineer to build a critical Key Management Service (KMS) driver, integrating Canton with Microsoft Azure’s Key Vault and Managed HSM. This role focuses on creating a secure, scalable component for cryptographic operations in production, requiring close collaboration with infrastructure and blockchain engineering teams.
What You'll Do
- Design, implement, and test a KMS integration layer between Canton and Azure Key Vault/Managed HSM to enable secure cryptographic signing and key usage.
- Collaborate with infrastructure teams to meet Canton’s protocol requirements for key custody, signing, and certificate validation.
- Develop reusable, well-tested libraries and ensure integration with deployment pipelines and secure CI/CD workflows.
- Participate in code reviews, threat modeling, and security audits to ensure high-quality, secure software delivery.
- Provide clear technical documentation and collaborate cross-functionally with product, DevOps, and architecture teams.
What We're Looking For
- Strong experience in Scala and/or Java, with demonstrated ability to write clean, maintainable, and secure code.
- Solid understanding of cryptographic fundamentals, including key lifecycle, secure storage, and secure computation.
- Familiarity with TLS, X.509 certificates, digital signature algorithms (e.g., ECDSA, EdDSA), and encryption workflows (AES, RSA, etc.).
- Experience building production-grade integrations, SDK wrappers, or plugins in distributed systems or blockchain platforms.
- Familiarity with REST/JSON APIs and asynchronous systems.
- Comfortable working in Git-based environments with modern CI/CD tooling.
- Upper-intermediate to fluent English (written & spoken) for effective technical communication.
Nice to Have
- Prior experience with blockchain or DLT platforms, particularly in enterprise use cases.
- Knowledge of Canton, Daml, or similar smart contract languages.
- Experience with Azure SDKs, especially for Key Vault and Managed HSM.
- Experience with AWS KMS, GCP KMS, or any HSM provider.
- Familiarity with secure software development practices (e.g., OWASP, threat modeling).
- Understanding of DevSecOps, including tools like HashiCorp Vault, secrets management, and security automation.
- Experience working with Kubernetes, Helm charts, and infrastructure automation (e.g., Terraform, Pulumi).
- Interest in financial infrastructure, custody platforms, or regulated systems.
Technical Stack
- Languages: Scala, Java
- Cloud & Services: Azure Key Vault, Azure Managed HSM
- Platforms: Canton, REST/JSON APIs, TLS, X.509
- Cryptography: ECDSA, EdDSA, AES, RSA
- Tools: Git, CI/CD
- Infrastructure: Kubernetes, Helm, Terraform, Pulumi, HashiCorp Vault
Benefits & Compensation
- Excellent compensation and benefits package including medical insurance and sports activities.
- International experience in a stable company.
- A passionate team in an innovative, casual, positive, and open work environment ready to meet your new ideas.
- Great opportunities for personal and professional development as well as the chance to change the way the business works in the financial world.
Work Mode
This role offers a hybrid work model.
IntellectEU is committed to our people and believes in building a better future with the newest technologies. We provide a growing ground for young people and industry veterans to play, launch ideas, and work closely with our clients.






