Rust Software Engineer Lead, Distributed Ledger

Position Type :

Type Of Hire :

Job Description

About Keystone and LYRIQ
Keystone is building bank-grade network infrastructure for regulated digital value movement. The product runs on the LYRIQ platform, which provides the ledger, integration, control, and operating services needed to support tokenized deposits, digital liquidity, and related bank-led payment and settlement use cases.

About the Team
The Keystone engineering team builds the ledger and network services behind regulated digital money and bank-led settlement flows. The core platform is a permissioned, BFT-replicated distributed ledger written primarily in Rust, with a signed append-only transaction log, hierarchical account trees, programmable transfer and access rules, and hardware-backed key custody.

As Senior Rust Engineer, Distributed Ledger, you will work close to the metal on consensus, cryptography, state storage, and correctness engineering. You will also build and support the gRPC services, SDKs, operating evidence, and integration patterns that Keystone customers and bank engineering teams use to connect to the platform.

• Consensus and the ledger core: our Pala-family BFT consensus implementation, block production and finality, state storage on RocksDB, snapshotting, and state recovery.
• Cryptography and key custody: Ed25519 transaction signing, Merkle-committed state, threshold and shard-based key handling, AWS KMS and on-premise HSM integration, and trusted execution environments (Intel SGX via Fortanix, AWS Nitro Enclaves).
• Programmable money: the expression language, compiler, and bytecode VM behind our role-based access control and transfer rules, including the parser, type checker, and interpreter.
• Ledger APIs and SDKs: gRPC services built on tonic and Protocol Buffers, plus the REST gateways, CLI, and multi-language client SDKs that integrators depend on.
• Indexing and observability: streaming ledger observations into ClickHouse and Postgres for balance queries, block explorers, and reporting, instrumented end to end with Prometheus metrics and tracing.
• Correctness engineering: deterministic simulation harnesses, per-node fault injection, property-based testing with proptest, fuzzing, and formal model checking of consensus invariants.

• Six or more years of professional backend or systems engineering, including at least three years writing production Rust.
• Deep, practical async Rust: tokio, futures, trait and generic design, lifetimes, Send and Sync reasoning, and the judgement to know when a lock beats a channel.
• Hands-on experience with blockchain or distributed ledger internals: a consensus protocol (BFT, Raft, Paxos, or similar), transaction validation, state commitment such as Merkle trees, block or state storage, or node-to-node networking.
• Applied cryptography fundamentals: digital signatures, hashing, key derivation and custody, and a clear instinct for where the trust boundaries sit in a system.
• Experience designing and evolving service APIs, ideally gRPC and Protocol Buffers, including backwards compatibility across versioned clients in the field.
• Comfort operating what you build: Docker, Kubernetes and Helm, metrics-driven and trace-driven debugging, and the persistence to take a production incident down to root cause.
• A testing discipline that matches the stakes: unit, integration, and simulation-level testing of concurrent and distributed code, including diagnosing and properly fixing timing-sensitive failures rather than retrying them away.
• Clear technical writing; you can produce a design note that both your own team and a bank's engineers can act on.

• Experience with central bank digital currency, tokenized deposits, payments, or core banking systems, and familiarity with standards such as ISO 20022.
• Trusted execution environment work (Intel SGX, AWS Nitro Enclaves, vsock transports) or HSM and PKCS#11 integration.
• Language, compiler, or virtual machine implementation experience: parsers, type systems, bytecode interpreters.
• Columnar analytics at scale with ClickHouse, event pipelines on Kafka, or disciplined schema migration work with sqlx and Postgres.
• Familiarity with a second language in our stack: TypeScript, Python, or Go.
• Public contributions to Rust or distributed ledger open source projects.

What we use

Core ledger

• Rust, Pala-family BFT consensus, RocksDB, Merkle-committed state

Cryptography and custody

• Ed25519, AWS KMS, on-premise HSMs, Intel SGX (Fortanix), AWS Nitro Enclaves

Services and APIs

• tonic gRPC, Protocol Buffers, axum, actix-web, REST gateways

Data and indexing

• ClickHouse, Postgres with sqlx, Kafka, ZeroMQ

Platform

• Docker, Kubernetes, Helm, AWS, GitHub Actions

Testing

• proptest, deterministic simulation, fault injection, fuzzing, formal model checking

Clients

• Rust, TypeScript

Small, senior teams own services end-to-end, from design through production operation. Code is carefully reviewed, formatted with cargo fmt through a pre-commit hook, and gated by CI that includes consensus simulation, contract tests, and nightly full-suite integration runs. We value signed commits, clean history, operational evidence, and documentation that outlives the person who wrote it.

Location preference is the New York City area, with flexibility for remote candidates who can reliably work Eastern Time hours and travel to New York as needed for customer sessions, planning, and key team meetings. Compensation details to be finalized with recruiting.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

FIS is committed to providing its employees with an exciting career opportunity and competitive compensation. The pay range for this full-time position is 133,980.00 - 227,770.00 USD Annual and reflects the minimum and maximum target for new hire salaries for this position based on the posted role, level, and location. Within the range, actual individual starting pay is determined by additional factors, including job-related skills, experience, and relevant education or training. Any changes in work location will also impact actual individual starting pay. Please consult with your recruiter about the specific salary range for your preferred location during the hiring process.

#LI-LO1

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

EEOC Statement

FIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here

For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass