Sr Software Engineer – Secure Signing Infrastructure
Blue Origin3 days ago
Cupertino, CA, USA or Seattle, WA, USASenior
Base Salary
$230k - $323k/yr
Responsibilities
- Design, develop, deploy, and maintain highly available network-based services for signing and encrypting firmware binaries.
- Develop secure signing workflows for local developer environments and automated build and release pipelines.
- Implement authentication, authorization, credential, cryptographic key, and environment-separation controls.
- Configure and integrate Hardware Security Modules and develop software interfaces for cryptographic infrastructure.
- Build monitoring, health reporting, logging, alarming, and operational tooling for signing services.
- Scale signing services for engineers across multiple geographic locations and troubleshoot build, deployment, authentication, and infrastructure issues.
- Integrate signing infrastructure with firmware build, release, and deployment systems.
- Evaluate third-party signing and security solutions and support technical trade studies, proof-of-concepts, and build-versus-buy decisions.
- Support signing infrastructure across development, production, manufacturing, and silicon bring-up.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline.
- At least 5 years of professional software engineering experience.
- Experience designing, developing, and operating reliable network-based or backend services in self-hosted or cloud-based environments.
- Strong software development and debugging skills.
- Experience implementing or managing authentication services, authorization mechanisms, and credentials.
- Experience with monitoring, health checks, logging, alarming, reliability, availability, scalability, and operational support for production services.
- Experience integrating software services with automated build, release, or CI/CD environments.
- Ability to collaborate across software, infrastructure, security, firmware, silicon, and embedded engineering teams.
- Interest in developing expertise in security infrastructure, cryptography, HSMs, and secure signing systems.
- Must be a U.S. citizen or national, U.S. permanent resident, or lawfully admitted refugee or asylee.
- Preferred: PKCS#11 API experience with Python, Java, C, C++, or similar languages; HSM administration or interface development; cryptography and certificate-management knowledge; post-quantum cryptography familiarity; ELF and embedded firmware build experience; GitLab CI; distributed services; or firmware signing and secure-boot infrastructure.
Benefits
- Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short- and long-term disability, 401(k) with company match up to 5%, and an Education Support Program.
- Stock options for regular employees working at least 20 hours per week.
- Up to four weeks of paid time off per year based on scheduled hours and up to 14 company-paid holidays.
- Relocation is provided and travel is expected up to 20% of the time.
- Bonus and other benefits may depend on role type and job level and are discretionary and not guaranteed.
About Blue Origin
Blue Origin designs and manufactures rocket engines, reusable launch vehicles, and lunar transport systems for commercial and government customers. Its products include the suborbital New Shepard, the in-development New Glenn orbital rocket, BE-4 engines (used on ULA’s Vulcan), and the Blue Moon lander; revenue comes from launch services, engine supply, and space systems contracts, including a NASA Human Landing System award. Founded in 2000 by Jeff Bezos, the company is headquartered in Kent, Washington.