Senior Signing Infrastructure Engineer (Relocation + Travel)

Blue Origin; Hutto (TX); On-site; USD 230,000 - 323,000; Full time

Benefits offered by this job

Relocation provided

Travel up to 20% of the time

Interviews will include a technical a​

Job summary

Blue Origin is seeking an experienced engineer to design, develop, deploy, and operate secure signing infrastructure for firmware signing and encryption. You will work with security, silicon, firmware, software, manufacturing, and infra teams to securely manage cryptographic keys and signing operations across multiple sites.

The role emphasizes reliability, scalability, and high availability, with opportunities to influence signing workflows for local developers and automated CI/CD pipelines.

Qualifications

• Bachelor's degree in CS/CE/EE or related technical discipline.
• 5+ years of professional software engineering experience.
• Experience designing, developing, and operating high‑reliability network‑based or backend services.
• Strong software development and debugging skills.
• Experience implementing or managing authentication services, authorization mechanisms, and credentials.
• Experience developing monitoring, health checks, logging, and alarming for production network services.
• Experience integrating software services with automated build, release, or CI/CD environments.
• Experience designing software for reliability, availability, scalability, and operational support.
• Ability to work collaboratively across software, infrastructure, security, firmware, silicon, and embedded engineering teams.
• Interest and willingness to develop expertise in security infrastructure, cryptography, HSMs, and secure signing systems.
• Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Responsibilities

• Design, develop, deploy, and maintain highly available signing services for firmware signing/encrypting.
• Develop secure signing workflows for local dev environments and CI/CD pipelines.
• Implement authentication and authorization to restrict signing operations and keys.
• Configure, integrate with, and manage Hardware Security Modules (HSMs).
• Develop interfaces and services for interacting with HSMs and cryptographic infrastructure.
• Develop monitoring, health/status reporting, logging, alarming, and tooling.
• Design and scale signing services for dozens to hundreds of engineers across locations.
• Maintain separation between development and production signing environments.
• Troubleshoot signing-related build/deploy/auth/infrastructure issues.
• Integrate signing infrastructure with firmware build/release/deploy systems.
• Collaborate with security engineers on crypto/key-management requirements.
• Evaluate third-party signing and security infra solutions; PoC and build-vs-buy.
• Support evolution of signing infra from development through production, manufacturing, silicon bring-up.

Skills

Software development

Backend services

Authentication/Authorization

CI/CD/Automation

Monitoring/Logging

Security infrastructure

Team collaboration

Education

Bachelor's degree in CS/CE/EE

Job description

Blue Origin is seeking an experienced engineer to design, develop, deploy, and operate secure signing infrastructure for firmware signing and encryption. You will work with security, silicon, firmware, software, manufacturing, and infra teams to securely manage cryptographic keys and signing operations across multiple sites.

The role emphasizes reliability, scalability, and high availability, with opportunities to influence signing workflows for local developers and automated CI/CD pipelines.