Senior PKI & Certificate Security Engineer

Blue Origin; Hutto (TX); On-site; USD 230,000 - 323,000; Full time

Benefits offered by this job

Relocation provided

Travel up to 20%

Technical assessment interview

Job summary

Blue Origin seeks a PKI and cryptographic infrastructure engineer to design, implement, automate, and operate PKI, certificates, and HSM for the TeraWave program. You will work with security, silicon, firmware, software, manufacturing, and infrastructure teams to deploy scalable security infrastructure across development, manufacturing, and production environments.

You will manage certificate lifecycles, perform secure key ceremonies, monitor HSM health, and develop automation tooling for PKI

Qualifications

• Bachelor's degree in a relevant technical discipline.
• 5+ years of PKI or cryptographic infrastructure experience.
• Experience designing, implementing, or administering enterprise PKI and certificate lifecycle management.
• Experience with HSMs or cryptographic hardware.
• U.S. citizenship or eligible status to work in the U.S.

Responsibilities

• Design, implement, administer, and maintain PKI and certificate-management infrastructure for TeraWave systems.
• Automate issuance, renewal, revocation, rotation, and replacement of digital certificates.
• Configure HSMs, token management, and cryptographic service integrations for applications and services.
• Install and maintain enterprise-class HSM appliances and monitor their health and performance.
• Plan and participate in secure key ceremonies and manage cryptographic key material lifecycle.

Skills

PKI expertise

Cryptography

HSM administration

Cross-functional collaboration

Security operations

Education

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, or related technical discipline

Tools

Python

PKCS#11 APIs

HSM software tooling

Job description

Blue Origin seeks a PKI and cryptographic infrastructure engineer to design, implement, automate, and operate PKI, certificates, and HSM for the TeraWave program. You will work with security, silicon, firmware, software, manufacturing, and infrastructure teams to deploy scalable security infrastructure across development, manufacturing, and production environments.

You will manage certificate lifecycles, perform secure key ceremonies, monitor HSM health, and develop automation tooling for PKI