Job Description
IntellectEU is an international technology company focused on digital finance and emerging technologies. At IntellectEU we are on a mission to become the top-of-mind fintech company. We are committed to our people and believe in building a better future with the newest of the newest technologies. Giving young people and industry veterans a growing ground to play, launch ideas & work very closely with our clients. With our hands-on experience in both technical & capital markets, there’s no challenge that’s left untackled. Since 2006 we have been focused on financial messaging and integration, being a SWIFT service partner.
This role focuses on building a custom Key Management Service (KMS) driver to integrate Canton with Microsoft Azure’s Key Vault and Managed HSM, ensuring secure and scalable cryptographic operations for production environments.
The KMS driver is a critical component in enabling secure signing, encryption, and key management workflows that comply with enterprise and regulatory requirements. You will collaborate with infrastructure and blockchain engineers to design a plug-in that meets high security, performance, and fault-tolerance standards. The ideal candidate will contribute to secure, high-performance cryptographic operations in a distributed system.
Responsibilities:
- Design, implement, and test a KMS integration layer between Canton and Azure Key Vault/Managed HSM, enabling secure cryptographic signing and key usage.
- Work closely with infrastructure teams to meet Canton’s protocol requirements for key custody, signing, and certificate validation.
- Develop reusable, well-tested libraries and ensure integration with deployment pipelines and secure CI/CD workflows.
- Participate in code reviews, threat modeling, and security audits to ensure high-quality, 8 secure software delivery.
- Provide clear technical documentation, and collaborate cross-functionally with product, DevOps, and architecture teams.
Must have:
- Strong experience in Scala and/or Java, with demonstrated ability to write clean, maintainable, and secure code.
- Solid understanding of cryptographic fundamentals, including key lifecycle, secure storage, and secure computation.
- Familiarity with:
- TLS, X.509 certificates
- Digital signature algorithms (e.g. ECDSA, EdDSA)
- Encryption/decryption workflows (AES, RSA, etc.)
- Experience building production-grade integrations, SDK wrappers, or plugins in distributed systems or blockchain platforms.
- Familiarity with REST/JSON APIs and asynchronous systems.
- Comfortable working in Git-based environments with modern CI/CD tooling.
- Upper-intermediate to fluent English (written & spoken) for effective technical communication.
Nice to have:
- Prior experience with blockchain or DLT platforms, particularly in enterprise use cases.
- Knowledge of Canton, Daml, or similar smart contract languages.
- Experience with:
- Azure SDKs, especially for Key Vault and Managed HSM
- AWS KMS, GCP KMS, or any HSM provider
- Familiarity with secure software development practices (e.g. OWASP, threat modeling).
- Understanding of DevSecOps, including tools like HashiCorp Vault, secrets management, and security automation.
- Experience working with Kubernetes, Helm charts, and infrastructure automation (e.g. Terraform, Pulumi).
- Interest in financial infrastructure, custody platforms, or regulated systems is a plus.
We guarantee:
- Excellent compensation and benefits package including medical insurance and sports activities.
- International experience in a stable company: the company has offices in Antwerp, Lisbon, Krakow, Kyiv, New York and operates on the market for over 15 years.
- A passionate team in an innovative, casual, positive, and open work environment ready to meet your new ideas.
- Great opportunities for personal and professional development as well as the chance to change the way the business works in the financial world.
- Work where you're most productive — remote, in-office, or hybrid options available.
Join us to make an impact on the entire financial world!