Senior PKI & HSM Specialist

Blue Origin; Cupertino (CA); On-site; USD 230,000 - 323,000; Full time

Benefits offered by this job

Relocation provided

Travel up to 20%

Medical, dental, vision benefits

Life insurance (basic & supplemental)

Job summary

Blue Origin is seeking a security engineer to design, implement, and operate PKI, certificate-management, and HSM infrastructure for the TeraWave program. You will manage key material lifecycle and work with security, silicon, firmware, software, manufacturing, and infrastructure teams to deploy scalable cryptographic controls.

The role requires hands-on PKI and HSM experience, knowledge of X.509 and certificate lifecycles, and the ability to support secure production systems.

Qualifications

• Bachelor's degree in a technical field.
• 5+ years in PKI or cryptographic infrastructure.
• Experience designing or administering enterprise PKI.
• Knowledge of X.509, trust chains, and certificate lifecycle.
• Experience with HSMs and cryptographic hardware.
• U.S. citizen or eligible to work in the U.S.

Responsibilities

• Design, implement, administer PKI and certificate-management infrastructure.
• Automate issuance, renewal, revocation, rotation, and replacement of certificates.
• Configure HSM interfaces, token management, and cryptographic services.
• Maintain HSM appliances per vendor best practices and industry standards.
• Monitor HSM health, performance, and availability; troubleshoot issues.
• Plan and participate in secure key ceremonies.
• Develop tooling for PKI, HSM, and key-management operations.
• Collaborate with security, software, silicon, manufacturing, and infra teams.

Skills

PKI design

Cryptographic infrastructure

HSM management

Certificate management

Automation scripting (Python)

Security operations

Education

Bachelor's degree in Computer Science/Engineering/C cybersecurity

Tools

HSM appliances

PKCS#11 API

Python scripting

Certificate Authority management

Job description

Blue Origin is seeking a security engineer to design, implement, and operate PKI, certificate-management, and HSM infrastructure for the TeraWave program. You will manage key material lifecycle and work with security, silicon, firmware, software, manufacturing, and infrastructure teams to deploy scalable cryptographic controls.

The role requires hands-on PKI and HSM experience, knowledge of X.509 and certificate lifecycles, and the ability to support secure production systems.