Software Engineer – Key Management Infrastructure III

Blue Origin; Denver (CO); On-site; USD 150,931 - 211,303; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Stock options

Paid time off and holidays

Job summary

Blue Origin in Colorado is looking for a senior cryptographic software engineer to design, develop, and operate key management infrastructure underpinning space program security.

You’ll work with DevOps and hardware teams to deliver secure, scalable solutions meeting mission requirements and regulatory standards. The role demands hands‑on cryptography, HSM experience, and strong problem‑solving abilities.

Qualifications

• Bachelor’s degree in a related technical field.
• 5+ years of professional software engineering experience.
• Hands-on experience with cryptographic systems, key management infrastructure, or PKI.
• Proficiency in Python, Java, C, C++, Golang.
• Experience with HSMs such as Thales Luna, Entrust nShield, or AWS CloudHSM.
• Familiarity with CI/CD pipelines, version control (Git), and infrastructure automation.
• Working knowledge of Docker and Kubernetes.
• Understanding of NIST cryptographic standards (FIPS 140-2/3, SP 800-57, SP 800-131A).
• Ability to collaborate across hardware, software, and security teams.
• Strong analytical and problem‑solving skills with attention to detail.
• Excellent written and verbal communication skills.

Responsibilities

• Design, develop, and operate cryptographic key management infrastructure.
• Collaborate with DevOps and Hardware teams to deliver secure, scalable solutions.
• Ensure compliance with mission requirements and regulatory standards.
• Maintain and improve cryptographic systems and PKI workflows.

Skills

Python

Java

C

C++

Golang

Cryptography

PKI

CI/CD

Git

Infrastructure automation

NIST standards

Communication

Collaboration across teams

Education

Bachelor’s degree in Computer Science / Software Engineering / Cybersecurity / Electrical Engineering or related field

Tools

HSMs (Thales Luna, Entrust nShield, AWS CloudHSM)

Docker

Kubernetes

Git

CI/CD pipelines

Job description

Role Overview

In this role, you will be responsible for designing, developing, and operating cryptographic key management infrastructure that underpins the security of Blue Origin's space programs. You will work in close collaboration with DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions that meet both mission requirements and regulatory standards.

Minimum Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, or a related technical field
• 5+ years of professional software engineering experience
• Hands‑on experience with cryptographic systems, key management infrastructure, or PKI
• Proficiency in one or more programming languages, including Python, Java, C, C++, Golang
• Experience with Hardware Security Modules (HSMs) such as Thales Luna, Entrust nShield, or AWS CloudHSM
• Familiarity with DevOps tools and practices, including CI/CD pipelines, version control (Git), and infrastructure automation
• Working knowledge of containerization and orchestration platforms such as Docker and Kubernetes
• Understanding of NIST cryptographic standards (FIPS 140‑2/3, SP 800‑57, SP 800‑131A)
• Ability to work collaboratively across multidisciplinary teams, including hardware, software, and security stakeholders
• Strong analytical and problem‑solving skills with a high attention to detail
• Excellent written and verbal communication skills

Preferred Qualifications

• Active Top Secret (TS) security clearance, or eligibility and willingness to obtain one
• Experience with COMSEC operations and government cryptographic key management systems (e.g., EKMS, SKL, KMI, DIAS)
• Familiarity with FIPS 140‑3 validated encryption products and associated key management procedures
• Experience with cloud‑based key management solutions, including AWS KMS, Azure Key Vault, Google Cloud KMS, or HashiCorp Vault
• Exposure to zero‑trust security architecture principles and implementation
• Experience in aerospace, defense, or government program environments
• Familiarity with ITAR/EAR regulations and their implications for software and systems development
• Knowledge of secure software development lifecycle frameworks and practices
• Experience working in Agile/Scrum development environments
• Relevant professional certifications such as CISSP (Certified Information Systems Security Professional), CompTIA Security+, Certified Cryptography Engineer (CCE), AWS Certified Security – Specialty

Base Pay Range

CO applicants is $150,931.00 - $211,303.05Other site ranges may differ

Benefits

• Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long‑term disability, 401(k) with a company match of up to 5%, and an Education Support Program.
• Stock Options for all regular employees (working at least 20 hours/week).
• Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company‑paid holidays.
• Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.

Equal Employment Opportunity

Blue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, sex, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws, including the Washington Fair Chance Act, the California Fair Chance Act, the Los Angeles Fair Chance in Hiring Ordinance, and other applicable laws. For more information on "Know Your Rights," please see here.

Affirmative Action and Disability Accommodation

Applicants wishing to receive information on Blue Origin's affirmative action plans, or applicants requiring a reasonable accommodation in order to participate in the application and interview process, please contact us at [e-mail]. Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.

Export Control Regulations

Applicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Background Check

• Required for all positions: Blue's Standard Background Check
• Required for certain job profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation
• Required for certain job profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing (CDL drivers only), vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.
• Required for certain job profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre‑employment and random drug testing as well as DOT physical