Senior Firmware Engineer, Security

Blue Origin LLC; San Francisco (CA); On-site; USD 230,000 - 323,000; Full time

Benefits offered by this job

Stock options

Medical, dental, vision

401(k) with company match

Paid time off

Education support program

Job summary

Blue Origin LLC is seeking a senior embedded firmware engineer to develop ROM code, bootloaders, and runtime firmware for secure enclaves in custom ASICs used in the TeraWave system.

You will work with ASIC, software, security, and system teams to define interfaces, enable secure boot and root-of-trust features, and support OTA updates and secure lifecycle management across development stages.

Qualifications

• Bachelor's degree in Electrical Engineering, Computer Engineering, Computer Science or related field.
• 8+ years of embedded software/firmware experience for complex SoCs/ASICs.
• Strong proficiency in C/C++ and low-level firmware development.
• Experience with bootloaders, ROM code, board-support software, device drivers, or low-level firmware.
• Solid understanding of embedded processor architectures, memory maps, interrupts, peripherals, and interfaces.
• Experience debugging embedded systems using JTAG/trace/logic analyzers.
• Knowledge of embedded security: secure boot, root of trust, cryptographic key management, secure firmware updates.

Responsibilities

• Develop ROM code, bootloaders, and runtime firmware for secure enclaves in custom ASICs.
• Design/implement firmware for secure boot, device attestation, and root-of-trust.
• Develop firmware infrastructure for OTA updates, recovery, and secure lifecycle management.
• Support provisioning: device identity, keys, credentials, secure configuration.
• Develop secure debug, telemetry, tamper monitoring, and recovery mechanisms.
• Collaborate with ASIC, security, software, and system teams on interfaces and security requirements.
• Support pre-silicon firmware development and silicon bring-up.

Skills

C/C++

Embedded software

Bootloaders

Security concepts

JTAG debugging

Education

Bachelor's degree in Electrical Engineering

Bachelor's degree in Computer Engineering

Bachelor's degree in Computer Science

Tools

JTAG

Trace tooling

Logic analyzers

FPGA

Job description

Application close date:Applications will be accepted on an ongoing basis until the requisition is closed.At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!Blue Origin is pioneering the future of space-based communications with TeraWave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth. This multi-orbit constellation will consist of optically interconnected satellites in low Earth orbit (LEO) and medium Earth orbit (MEO), providing enterprise-grade connectivity for critical operations worldwide.Job DescriptionAs part of a hardworking team of specialists and engineers, you will develop low-level firmware for the secure enclaves of custom ASICs in the TeraWave system . You will work closely with silicon, software, security, and system engineering teams to develop the foundational firmware required to securely boot, provision, operate, update, monitor, and recover custom silicon throughout its lifecycle.Responsibilities include but are not limited to:Develop ROM code, bootloaders, and runtime firmware for secure enclaves within custom ASICs.Design and implement firmware supporting secure boot, device attestation, and root-of-trust functionality.Develop firmware infrastructure for OTA updates, recovery, and secure firmware lifecycle management.Support manufacturing provisioning, including device identity, keys, credentials, and secure configuration.Develop and support secure debug, telemetry, tamper monitoring, and device recovery mechanisms.Work closely with ASIC, security, software, and system teams to define hardware/software interfaces and security requirements.Support pre-silicon firmware development and validation using simulation, emulation, FPGA, or other available development platforms.Support silicon bring-up, debugging, validation, and production deployment of secure-enclave firmware.Develop high-quality, maintainable embedded software with appropriate unit testing, code review, and documentation.Minimum QualificationsBachelor's degree in Electrical Engineering, Computer Engineering, Computer Science, or a related technical field.8+ years of experience developing embedded software or firmware for complex SoCs, ASICs, microcontrollers, or similar embedded systems.Strong programming experience in C/C++ and low-level embedded software development.Experience developing bootloaders, ROM code, board-support software, device drivers, or low-level firmware .Strong understanding of embedded processor architectures, memory maps, interrupts, peripherals, and hardware/software interfaces.Experience debugging embedded systems using tools such as JTAG, trace, logic analyzers, or equivalent debugging environments.Experience with embedded security concepts such as secure boot, root of trust, cryptographic key management, device identity, or secure firmware updates .Ability to work closely with ASIC and hardware teams during pre-silicon development and silicon bring-up.Preferred QualificationsExperience developing firmware specifically for secure enclaves, hardware roots of trust, or security subsystems .Experience with manufacturing provisioning, device attestation, anti-rollback, secure debug, and tamper detection .Experience with cryptographic hardware accelerators, key storage, OTP/eFuse, TRNG, or secure memory.Experience with custom ASIC or SoC pre-silicon verification and post-silicon bring-up .Experience developing firmware for high-reliability, aerospace, satellite, communications, networking, or other complex systems.Familiarity with ARM or RISC-V processor architectures and associated embedded development environments.Special MentionsRelocation providedInterviews will include a technical assessmentBase Pay Range for:CA applicants is $230,398.00 - $322,556.85WA applicants is $230,398.00 - $322,556.85Other site ranges may differCulture StatementDon’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.Export Control RegulationsApplicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.Background CheckRequired for all positions: Blue’s Standard Background CheckRequired for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installationRequired for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.Required for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physicalBenefitsBenefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.Stock Options for all regular employees (working at least 20 hours/week)Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.Equal Employment OpportunityBlue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, sex, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws, including the Washington Fair Chance Act, the California Fair Chance Act, the Los Angeles Fair Chance in Hiring Ordinance, and other applicable laws.Affirmative Action and Disability AccommodationApplicants wishing to receive information on Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at [e-mail] . Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.