Sr Software Engineer – Secure Signing Infrastructure

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin we envision millions of people living and working in space for the benefit of Earth. Were working to develop reusable safe and low-cost space vehicles and systems within a culture of safety collaboration and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

Blue Origin is pioneering the future of space-basedconnectivitywithTeraWave a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6Tbpsanywhere on network will service tens of thousands of enterprise data center and government users who require reliable connectivity for critical operations.

Job Description

As part of a hardworking team of engineers and specialists you will design develop deploy and operate secure signing infrastructure supporting TeraWave custom silicon and embedded systems. You will develop highly available network-based services used to sign and encrypt firmware binaries supporting both local developer workflows and automated CI/CD build and release pipelines.

You will work closely with security silicon firmware software manufacturing and infrastructure teams to ensure signing keys and cryptographic operations are securely controlled while providing reliable scalable and highly available signing services to engineering teams across multiple geographic locations.

Special Mentions

• Relocation provided
• Travel expected up to 20% of the time
• Interviews will include a technical assessment

Responsibilities include but are not limited to:

• Design develop deploy and maintain highly available network-based services for signing and encrypting firmware binaries.
• Develop secure signing workflows supporting both local developer environments and automated CI/CD build and release pipelines.
• Design and implement authentication and authorization mechanisms to restrict access to signing operations and cryptographic keys to authorized users and systems.
• Configure integrate with and manage Hardware Security Modules (HSMs) used to securely store and operate on cryptographic key material.
• Develop software interfaces and services for interacting with HSMs and cryptographic infrastructure.
• Develop monitoring health/status reporting logging alarming and operational tooling for signing infrastructure.
• Design and scale signing services to support dozens to hundreds of engineers across multiple geographic locations.
• Maintain appropriate separation and security controls between development and production signing environments.
• Troubleshoot signing-related build deployment authentication and infrastructure issues and collaborate across engineering disciplines to resolve them.
• Integrate signing infrastructure with firmware build release and deployment systems.
• Work closely with security engineers to implement cryptographic key-management authentication and infrastructure-security requirements.
• Evaluate third-party signing and security infrastructure solutions support technical trade studies and proof-of-concept integrations and contribute to build-versus-buy decisions.
• Support the evolution of signing infrastructure from development through production manufacturing and silicon bring-up.

Minimum Qualifications

• Bachelors degree in Computer Science Computer Engineering Electrical Engineering or a related technical discipline.
• 5 years of professional software engineering experience.
• Experience designing developing and operating high-reliability network-based or backend services in self-hosted or cloud-based environments.
• Strong software development and debugging skills.
• Experience implementing or managing authentication services authorization mechanisms and credentials.
• Experience developing monitoring health checks logging and alarming for production network services.
• Experience integrating software services with automated build release or CI/CD environments.
• Experience designing software for reliability availability scalability and operational support.
• Ability to work collaboratively across software infrastructure security firmware silicon and embedded engineering teams.
• Interest and willingness to develop expertise in security infrastructure cryptography HSMs and secure signing systems.
• Must be a U.S. citizen or national U.S. permanent resident (current Green Card holder) or lawfully admitted into the U.S. as a refugee or granted asylum.

Preferred Qualifications

• Experience using PKCS#11 APIs from Python Java C/C or similar languages.
• Experience configuring administering or developing software interfaces to Hardware Security Modules (HSMs).
• Strong understanding of cryptography including encryption digital signatures hashing key exchange and secure communications.
• Knowledge of X.509 certificates certificate authorities trust chains key management revocation and certificate lifecycle management.
• Familiarity with post-quantum cryptographic algorithms.
• Familiarity with Executable and Linkable Format (ELF) binaries and embedded firmware build processes.
• Experience with GitLab CI or similar CI/CD systems.
• Experience deploying and operating distributed services across multiple geographic locations.
• Experience with firmware signing secure boot OTA firmware-update signing or related embedded security infrastructure.

Base Pay Range for:

CA applicants is $230398.00 - $322556.85 WA applicants is $230398.00 - $322556.85

Other site ranges may differ

Culture Statement

Dont meet all desired requirements Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin we are dedicated to building an authentic workplace so if youre excited about this role but your past experience doesnt align perfectly with every desired qualification in the job description we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Export Control Regulations

Applicants for employment at Blue Origin must be a U.S. citizen or national U.S. permanent resident (i.e. current Green Card holder) or lawfully admitted into the a refugee or granted asylum.

Background Check

• Required for all positions: Blues Standard Background Check
• Required for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation
• Required for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW) Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files Medical Certification (obtained before onboarding) Road Test Hours of Service Drug and Alcohol Testing vehicle inspection requirements CDL requirements (if applicable) and hazardous materials transportation/shipping training.
• Required for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential which includes pre-employment and random drug testing as well as DOT physical

Benefits

• Benefits include: Medical dental vision basic and supplemental life insurance paid parental leave short and long-term disability 401(k) with a company match of up to 5% and an Education Support Program.
• Stock Options for all regular employees (working at least 20 hours/week)
• Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours and up to 14 company-paid holidays.
• Dependent on role type and job level employees may be eligible for benefits and bonuses based on the companys intent to reward individual contributions and enable them to share in the companys results or other factors at the companys sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.

Equal Employment Opportunity

Blue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting retaining and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications performance and abilities. We support the establishment and maintenance of a workplace that fosters trust equality and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire promotion and other terms and conditions of employment regardless of their race color religion sex sexual orientation gender identity national origin/ethnicity age physical or mental disability genetic factors military/veteran status or any other status or characteristic protected by federal state and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal state and local laws including the Washington Fair Chance Act the California Fair Chance Act the Los Angeles Fair Chance in Hiring Ordinance and other applicable laws. For more information on Know Your Rights please see here.

Affirmative Action and Disability Accommodation

Applicants wishing to receive information on Blue Origins Affirmative Action Plans or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process please contact us at. Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.