Senior Cryptography & Signing Infrastructure Engineer

Blue Origin; Seattle (WA); On-site; USD 230,000 - 323,000; Full time

Benefits offered by this job

Relocation provided

Travel up to 20%

Technical assessment in interviews

Job summary

Blue Origin is building a future where millions work in space. We design and deploy signing infrastructure for firmware binaries, with secure signing workflows and HSM integrations.

This role supports dozens to hundreds of engineers across multiple locations and emphasizes reliability, security, and scalable operation. The candidate will collaborate across software, infrastructure, security, firmware, silicon, and embedded teams, contributing to build‑versus‑buy decisions and ongoing production

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or related technical discipline.
• 5+ years of professional software engineering experience.
• Experience designing, developing, and operating high‑reliability network‑based or backend services in self‑hosted or cloud environments.
• Strong software development and debugging skills.
• Experience implementing or managing authentication services, authorization mechanisms, and credentials.
• Experience developing monitoring, health checks, logging, and alarming for production network services.
• Experience integrating software services with automated build, release, or CI/CD environments.
• Experience designing software for reliability, availability, scalability, and operational support.
• Ability to work collaboratively across software, infrastructure, security, firmware, silicon, and embedded engineering teams.
• Interest and willingness to develop expertise in security infrastructure, cryptography, HSMs, and secure signing systems.
• Must be a U.S. citizen or national, U.S. permanent resident, or lawfully admitted into the U.S. as a refugee or granted asylum.

Responsibilities

• Design, develop, deploy, and maintain highly available network‑based services for signing and encrypting firmware binaries.
• Develop secure signing workflows supporting local developer environments and CI/CD pipelines.
• Design and implement authentication and authorization mechanisms to restrict access to signing operations and cryptographic keys.
• Configure, integrate with, and manage Hardware Security Modules (HSMs).
• Develop software interfaces and services for interacting with HSMs and cryptographic infrastructure.
• Develop monitoring, health/status reporting, logging, alarming, and operational tooling for signing infrastructure.
• Design and scale signing services to support dozens to hundreds of engineers across locations.
• Maintain separation between development and production signing environments.
• Troubleshoot signing‑related build, deployment, authentication, and infrastructure issues.
• Integrate signing infrastructure with firmware build, release, and deployment systems.
• Work with security engineers on cryptographic, key‑management, authentication, and infrastructure security requirements.
• Evaluate third‑party signing and security infrastructure solutions and contribute to build‑versus‑buy decisions.
• Support evolution of signing infrastructure from development through production, manufacturing, and silicon bring‑up.

Skills

Software engineering

Backend services

Auth/Authorization

Monitoring & logging

CI/CD integration

Reliability & scalability

Cross-functional teamwork

Security infra interest

US citizenship or residency

Education

Bachelor's degree (CS/CE)

Tools

PKCS#11 APIs

HSMs

GitLab CI

Job description

Blue Origin is building a future where millions work in space. We design and deploy signing infrastructure for firmware binaries, with secure signing workflows and HSM integrations.

This role supports dozens to hundreds of engineers across multiple locations and emphasizes reliability, security, and scalable operation. The candidate will collaborate across software, infrastructure, security, firmware, silicon, and embedded teams, contributing to build‑versus‑buy decisions and ongoing production