Senior Software Engineer - Secure Signing & Crypto Infra

Blue Origin; Cupertino (CA); On-site; USD 230,000 - 323,000; Full time

Benefits offered by this job

Medical benefits

Stock options

Paid time off

Education support

Job summary

Blue Origin LLC is seeking an engineer to design, deploy, and operate secure signing infrastructure for TeraWave firmware binaries. You will work across security, firmware, software, and infrastructure teams to ensure secure, scalable signing services across multiple sites.

You will develop and maintain signing workflows, authentication controls, and interfaces to HSMs, while supporting CI/CD pipelines and automated release processes. Relocation is supported and travel up to 20% may be required.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline.
• 5+ years of professional software engineering experience.
• Experience designing, developing, and operating high-reliability network-based or backend services.
• Experience implementing or managing authentication services and credentials.
• Experience developing monitoring, health checks, logging, and alarming for production services.

Responsibilities

• Design, develop, deploy, and maintain highly available signing services for firmware binaries.
• Develop secure signing workflows for local environments and CI/CD pipelines.
• Implement authentication/authorization mechanisms to restrict signing access.
• Configure and manage hardware security modules (HSMs) for cryptographic key material.
• Develop interfaces to interact with HSMs and cryptographic infrastructure.
• Build monitoring, health reporting, logging, and tooling for signing infrastructure.
• Scale signing services to support dozens to hundreds of engineers across locations.
• Maintain separation between development and production signing environments.
• Troubleshoot signing-related issues and collaborate across teams.
• Integrate signing infrastructure with firmware build, release, and deployment systems.
• Collaborate with security engineers on cryptographic and infrastructure-security requirements.

Skills

Software engineering

Backend services

Authentication services

CI/CD

Security concepts

Education

Bachelor's degree in CS/CE/EE

Tools

PKCS#11 APIs

HSMs

GitLab CI

CI/CD tooling

Job description

Blue Origin LLC is seeking an engineer to design, deploy, and operate secure signing infrastructure for TeraWave firmware binaries. You will work across security, firmware, software, and infrastructure teams to ensure secure, scalable signing services across multiple sites.

You will develop and maintain signing workflows, authentication controls, and interfaces to HSMs, while supporting CI/CD pipelines and automated release processes. Relocation is supported and travel up to 20% may be required.