Senior Infrastructure Security Engineer

Matter Labs, the team behind zkSync, is seeking a Senior Infrastructure Security Engineer to secure the systems powering one of Ethereum's largest ZK rollups. In this fully remote role, you will protect cloud and on-premises infrastructure for zkSync nodes, provers, and sequencers — working at the frontier of zero-knowledge cryptography and production blockchain security.

• Lead security reviews and hardening of cloud infrastructure (GCP/AWS) for zkSync nodes, provers, and sequencer systems.
• Implement zero-trust networking, identity management, and secrets management across zkSync infrastructure.
• Perform threat modeling and vulnerability assessments of blockchain-specific attack surfaces including smart contracts and rollup bridges.
• Build security automation for CI/CD pipelines and infrastructure-as-code to shift security left.
• Collaborate with protocol engineers on zkEVM security architecture and audit preparation.

• 5+ years of infrastructure security engineering experience in cloud environments.
• Expert-level knowledge of cloud security (GCP or AWS) and Kubernetes hardening practices.
• Experience with cryptographic systems, HSMs, or zero-knowledge proof infrastructure is highly valued.
• Proficiency with security tooling: SIEM, vulnerability scanners, intrusion detection systems.
• Familiarity with Ethereum, ZK rollups, or Layer-2 protocol architecture is strongly preferred.