Embedded Security Engineer - HSM Trust & Device Crypto

JobCubby; San Francisco, Northern (CA, KY); Hybrid; USD 180,000 - 240,000; Full time

Job summary

OpenAI is hiring a Security Software Engineer to design and implement hardware-backed security foundations across its device ecosystem. The role focuses on hardening the boundary between policy systems and HSMs that protect cryptographic keys, governing what may be signed and how changes are authorized.

You will develop software and firmware near an HSM trust boundary, including trusted applications, firmware components, device drivers, and cryptographic service integrations.

Qualifications

• 5+ years experience building secure embedded firmware for constrained environments.
• Deep programming experience in C, C++, or Rust.

Responsibilities

• Design and implement security-critical software and firmware for HSMs, secure elements, TEEs, and hardware roots of trust.
• Build and harden the policy-to-HSM boundary for certificate issuance and cryptographic signing operations.
• Develop HSM trusted applications, firmware components, host interfaces, and device drivers.
• Implement cryptographic interfaces such as PKCS#11, OpenSSL providers or engines, or platform key-storage APIs.
• Create end-to-end cryptographic protocols spanning devices, secure hardware, policy services, and backend.

Skills

Secure embedded firmware

C/C++/Rust

Tools

PKCS#11

OpenSSL

HSM interfaces

Job description

OpenAI is hiring a Security Software Engineer to design and implement hardware-backed security foundations across its device ecosystem. The role focuses on hardening the boundary between policy systems and HSMs that protect cryptographic keys, governing what may be signed and how changes are authorized.

You will develop software and firmware near an HSM trust boundary, including trusted applications, firmware components, device drivers, and cryptographic service integrations.