Senior Embedded / Security / Boot Firmware Engineer

Blue Origin; Kraków; On-site; PLN 180,000 - 300,000; Full time

Job summary

Blue Origin in Kraków seeks an experienced embedded firmware engineer to develop ROM code, bootloaders and runtime firmware for secure enclaves within custom ASICs in the TeraWave system.

You will work with ASIC, software, security and system teams to design hardware/software interfaces, implement secure boot, device attestation and OTA updates, and ensure high-quality, testable firmware across the lifecycle.

Qualifications

• Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or a related technical field.
• 8+ years of experience developing embedded software or firmware for complex SoCs, ASICs, microcontrollers, or similar embedded systems.
• Strong programming experience in C/C++ and low-level embedded software development.
• Experience developing bootloaders, ROM code, board-support software, device drivers, or low-level firmware.
• Strong understanding of embedded processor architectures, memory maps, interrupts, peripherals, and hardware/software interfaces.
• Experience debugging embedded systems using tools such as JTAG, trace, logic analyzers, or equivalent debugging environments.
• Experience with embedded security concepts such as secure boot, root of trust, cryptographic key management, device identity, or secure firmware updates.
• Ability to work closely with ASIC and hardware teams during pre-silicon development and silicon bring-up.

Responsibilities

• Develop ROM code, bootloaders, and runtime firmware for secure enclaves within custom ASICs.
• Design and implement firmware supporting secure boot, device attestation, and root-of-trust functionality.
• Develop firmware infrastructure for OTA updates, recovery, and secure firmware lifecycle management.
• Support manufacturing provisioning, including device identity, keys, credentials, and secure configuration.
• Develop and support secure debug, telemetry, tamper monitoring, and device recovery mechanisms.
• Work closely with ASIC, security, software, and system teams to define hardware/software interfaces and security requirements.
• Support pre-silicon firmware development and validation using simulation, emulation, FPGA, or other available development platforms.
• Support silicon bring-up, debugging, validation, and production deployment of secure-enclave firmware.
• Develop high-quality, maintainable embedded software with appropriate unit testing, code review, and documentation.

Skills

C/C++

Embedded firmware

Bootloaders

Secure boot / root of trust

Hardware interfaces

JTAG debugging

ARM/RISC-V

Education

Bachelor's degree in Electrical Engineering or related field

Tools

JTAG

Trace tools

Logic analyzers

Emulators

Job description

Application close date:
Applications will be accepted on an ongoing basis until the requisition is closed.
At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!

Blue Origin is pioneering the future of space-based connectivity with TeraWave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth. This network will service tens of thousands of enterprise, data center, and government users who require reliable connectivity for critical operations.

As part of a hardworking team of specialists and engineers, you will develop low-level firmware for the secure enclaves of custom ASICs in the TeraWave system . You will work closely with silicon, software, security, and system engineering teams to develop the foundational firmware required to securely boot, provision, operate, update, monitor, and recover custom silicon throughout its lifecycle.

Key Responsibilities:

• Develop ROM code, bootloaders, and runtime firmware for secure enclaves within custom ASICs.
• Design and implement firmware supporting secure boot, device attestation, and root-of-trust functionality.
• Develop firmware infrastructure for OTA updates, recovery, and secure firmware lifecycle management.
• Support manufacturing provisioning, including device identity, keys, credentials, and secure configuration.
• Develop and support secure debug, telemetry, tamper monitoring, and device recovery mechanisms.
• Work closely with ASIC, security, software, and system teams to define hardware/software interfaces and security requirements.
• Support pre-silicon firmware development and validation using simulation, emulation, FPGA, or other available development platforms.
• Support silicon bring-up, debugging, validation, and production deployment of secure-enclave firmware.
• Develop high-quality, maintainable embedded software with appropriate unit testing, code review, and documentation.

Minimum Qualifications:

• Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or a related technical field.
• 8+ years of experience developing embedded software or firmware for complex SoCs, ASICs, microcontrollers, or similar embedded systems.
• Strong programming experience in C/C++ and low-level embedded software development.
• Experience developing bootloaders, ROM code, board-support software, device drivers, or low-level firmware .
• Strong understanding of embedded processor architectures, memory maps, interrupts, peripherals, and hardware/software interfaces.
• Experience debugging embedded systems using tools such as JTAG, trace, logic analyzers, or equivalent debugging environments.
• Experience with embedded security concepts such as secure boot, root of trust, cryptographic key management, device identity, or secure firmware updates .
• Ability to work closely with ASIC and hardware teams during pre-silicon development and silicon bring-up.

Preferred Qualifications:

• Experience developing firmware specifically for secure enclaves, hardware roots of trust, or security subsystems .
• Experience with manufacturing provisioning, device attestation, anti-rollback, secure debug, and tamper detection .
• Experience with cryptographic hardware accelerators, key storage, OTP/eFuse, TRNG, or secure memory.
• Experience with custom ASIC or SoC pre-silicon verification and post-silicon bring-up .
• Experience developing firmware for high-reliability, aerospace, satellite, communications, networking, or other complex systems.
• Familiarity with ARM or RISC-V processor architectures and associated embedded development environments.

Culture Statement

Don’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Candidates may be subject to verification and BGS screening as per applicable law.