Sr Software Engineer – Secure Signing Infrastructure

Application close date:
Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! Blue Origin is pioneering the future of space-based connectivity with Tera Wave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth.

This network will service tens of thousands of enterprise, data center, and government users who require reliable connectivity for critical operations.

As part of a hardworking team of engineers and specialists, you will design, develop, deploy, and operate secure signing infrastructure supporting Tera Wave custom silicon and embedded systems. You will develop highly available network-based services used to sign and encrypt firmware binaries, supporting both local developer workflows and automated CI/CD build and release pipelines. You will work closely with security, silicon, firmware, software, manufacturing, and infrastructure teams to ensure signing keys and cryptographic operations are securely controlled while providing reliable, scalable, and highly available signing services to engineering teams across multiple geographic locations.

Relocation provided Travel expected up to 20% of the time Interviews will include a technical assessment

• Design, develop, deploy, and maintain highly available network-based services for signing and encrypting firmware binaries.
• Develop secure signing workflows supporting both local developer environments and automated CI/CD build and release pipelines.
• Design and implement authentication and authorization mechanisms to restrict access to signing operations and cryptographic keys to authorized users and systems.
• Configure, integrate with, and manage Hardware Security Modules (HSMs) used to securely store and operate on cryptographic key material.
• Develop software interfaces and services for interacting with HSMs and cryptographic infrastructure.
• Develop monitoring, health/status reporting, logging, alarming, and operational tooling for signing infrastructure.
• Design and scale signing services to support dozens to hundreds of engineers across multiple geographic locations.
• Maintain appropriate separation and security controls between development and production signing environments.
• Troubleshoot signing-related build, deployment, authentication, and infrastructure issues and collaborate across engineering disciplines to resolve them.
• Integrate signing infrastructure with firmware build, release, and deployment systems.
• Work closely with security engineers to implement cryptographic, key-management, authentication, and infrastructure-security requirements.
• Evaluate third-party signing and security infrastructure solutions, support technical trade studies and proof-of-concept integrations, and contribute to build-versus-buy decisions.
• Support the evolution of signing infrastructure from development through production, manufacturing, and silicon bring-up.

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline.
• 5+ years of professional software engineering experience.
• Experience designing, developing, and operating high-reliability network-based or backend services in self-hosted or cloud-based environments.
• Strong software development and debugging skills.
• Experience…