Senior Software Engineer – Secure Signing Infrastructure

BLUE ORIGIN

. Design, develop, deploy, and maintain highly available network-based services for signing and encrypting firmware binaries .

Posted 10/15/2026full-timeUnited StatesSenior💰 $230,398 - $322,557 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing secure signing workflows, cryptographic key management, and high-reliability network-based services. Proficient in collaborating across diverse engineering teams to ensure robust security infrastructure and operational support.

Highest-signal resume keywords

CryptographyHSM Configuration and ManagementCI/CD IntegrationNetwork-Based Services DevelopmentAuthentication and Authorization Mechanisms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Software DevelopmentDebuggingPKCS#11 APIsMonitoring and LoggingEmbedded Firmware ProcessesSecure BootOTA Firmware-Update SigningDigital SignaturesKey ManagementPost-Quantum Cryptographic Algorithms

Soft Skills

CollaborationProblem-SolvingCommunication

Tools & Technologies

GitLab CIHSMsCloud-Based EnvironmentsAutomated Build Systems

Industry Keywords

X.509 CertificatesCertificate AuthoritiesTrust ChainsSecurity InfrastructureFirmware Signing

Tech Stack

Tools & technologies

CloudJavaPythonC++

About the role

Key responsibilities & impact

Design, develop, deploy, and maintain highly available network-based services for signing and encrypting firmware binaries
Develop secure signing workflows for local developer environments and automated CI/CD build and release pipelines
Design and implement authentication and authorization mechanisms restricting access to signing operations and cryptographic keys
Configure, integrate with, and manage HSMs for secure storage and operation of cryptographic key material
Develop software interfaces and services for HSMs and cryptographic infrastructure
Develop monitoring, health/status reporting, logging, alarming, and operational tooling
Design and scale signing services for dozens to hundreds of engineers across multiple geographic locations
Maintain separation and security controls between development and production signing environments
Troubleshoot signing-related build, deployment, authentication, and infrastructure issues
Collaborate across security, silicon, firmware, software, manufacturing, and infrastructure teams
Integrate signing infrastructure with firmware build, release, and deployment systems
Implement cryptographic, key-management, authentication, and infrastructure-security requirements with security engineers
Evaluate third-party signing and security infrastructure solutions and support technical trade studies, proof-of-concept integrations, and build-versus-buy decisions
Support signing infrastructure evolution from development through production, manufacturing, and silicon bring-up

Requirements

What you’ll need

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline
5+ years of professional software engineering experience
Experience designing, developing, and operating high-reliability network-based or backend services in self-hosted or cloud-based environments
Strong software development and debugging skills
Experience implementing or managing authentication services, authorization mechanisms, and credentials
Experience developing monitoring, health checks, logging, and alarming for production network services
Experience integrating software services with automated build, release, or CI/CD environments
Experience designing software for reliability, availability, scalability, and operational support
Ability to work collaboratively across software, infrastructure, security, firmware, silicon, and embedded engineering teams
Interest and willingness to develop expertise in security infrastructure, cryptography, HSMs, and secure signing systems
Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum
Experience using PKCS#11 APIs from Python, Java, C/C++, or similar languages
Experience configuring, administering, or developing software interfaces to Hardware Security Modules (HSMs)
Strong understanding of cryptography, including encryption, digital signatures, hashing, key exchange, and secure communications
Knowledge of X.509 certificates, certificate authorities, trust chains, key management, revocation, and certificate lifecycle management
Familiarity with post-quantum cryptographic algorithms
Familiarity with ELF binaries and embedded firmware build processes
Experience with GitLab CI or similar CI/CD systems
Experience deploying and operating distributed services across multiple geographic locations
Experience with firmware signing, secure boot, OTA firmware-update signing, or related embedded security infrastructure
Technical assessment as part of the interview process
Blue’s Standard Background Check required for all positions

Benefits

Comp & perks

Relocation provided
Medical, dental, and vision insurance
Basic and supplemental life insurance
Paid parental leave
Short- and long-term disability
401(k) with a company match of up to 5%
Education Support Program
Stock options for all regular employees working at least 20 hours/week
Up to four weeks of paid time off per year based on weekly scheduled hours
Up to 14 company-paid holidays
Potential eligibility for benefits and bonuses based on role type, job level, individual contributions, company results, or other factors at the company's sole discretion
Travel expected up to 20% of the time