HSM Security Engineer: Embedded Crypto & Trust Boundaries

OpenAI, Inc.; Seattle (WA); On-site; USD 180,000 - 260,000; Full time

Job summary

OpenAI, Inc. is seeking a Security Software Engineer to design and implement hardware-backed security foundations across OpenAI’s device ecosystem.

You will harden the boundary between policy systems and HSMs, write production code, and verify security properties across hardware and software boundaries. You will work on HSM trust boundaries, PKCS#11 or PKI integrations, cryptographic provisioning, and signing-policy enforcement systems, delivering secure-by-default capabilities within production

Qualifications

• 5+ years experience building secure embedded firmware for constrained environments.
• Deep programming experience in C, C++, or Rust.
• Experience with security-critical software or firmware within or adjacent to an HSM, secure element, TEE, or hardware root of trust.

Responsibilities

• Design and implement security-critical software and firmware for HSMs, secure elements, trusted execution environments, and hardware roots of trust.
• Build and harden the policy-to-HSM boundary for certificate issuance and signing operations.
• Develop HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, or cryptographic service integrations.
• Implement cryptographic interfaces such as PKCS#11, OpenSSL providers or engines, platform key-storage APIs, or similar interfaces.
• Build firmware and software enforcing key generation, provisioning, usage, rotation, recovery, and destruction policies.
• Design and implement HSM-backed certificate authority, code-signing, key-management, and device-identity systems.
• Develop end-to-end cryptographic protocols across devices, secure hardware, policy services, and backend infrastructure.
• Develop security capabilities for device attestation, secure boot, provisioning, registration, and authentication.
• Create verifiable, auditable controls for trusted software and policy changes.

Skills

Embedded firmware

C/C++/Rust

Tools

PKCS#11

OpenSSL

Job description

OpenAI, Inc. is seeking a Security Software Engineer to design and implement hardware-backed security foundations across OpenAI’s device ecosystem.

You will harden the boundary between policy systems and HSMs, write production code, and verify security properties across hardware and software boundaries. You will work on HSM trust boundaries, PKCS#11 or PKI integrations, cryptographic provisioning, and signing-policy enforcement systems, delivering secure-by-default capabilities within production