{"id":2876706,"url":"https://alion.io/job/blue-origin-sr-software-engineer-secure-signing-infrastructure","title":"Sr Software Engineer – Secure Signing Infrastructure","company":{"id":3698,"name":"Blue Origin","domain":"blueorigin.com","url":"https://alion.io/company/blueorigin","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":92,"open_postings":247,"ghost_share":0,"stale_share":0.312,"repost_share":0.004,"time_to_fill_p50_days":45,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Backend","role_family":"Backend","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cupertino, United States","Seattle, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":230398,"max":322556,"currency":"USD","period":"year","gross":null,"usd_annual":322556},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"CI/CD","optional":false},{"name":"C++","optional":true},{"name":"GitLab CI","optional":true},{"name":"Java","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-14T00:00:00Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-29T13:41:47Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Application close date:\nApplications will be accepted on an ongoing basis until the requisition is closed.At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight!\nBlue Origin is pioneering the future of space-based connectivity with TeraWave, a revolutionary satellite communications network designed to deliver symmetrical data speeds of up to 6 Tbps anywhere on Earth. This network will service tens of thousands of enterprise, data center, and government users who require reliable connectivity for critical operations.Job Description\nAs part of a hardworking team of engineers and specialists, you will design, develop, deploy, and operate secure signing infrastructure supporting TeraWave custom silicon and embedded systems. You will develop highly available network-based services used to sign and encrypt firmware binaries, supporting both local developer workflows and automated CI/CD build and release pipelines.\nYou will work closely with security, silicon, firmware, software, manufacturing, and infrastructure teams to ensure signing keys and cryptographic operations are securely controlled while providing reliable, scalable, and highly available signing services to engineering teams across multiple geographic locations.\nSpecial Mentions\nRelocation provided\nTravel expected up to 20% of the time\nInterviews will include a technical assessment\nResponsibilities include but are not limited to:\nDesign, develop, deploy, and maintain highly available network-based services for signing and encrypting firmware binaries.\nDevelop secure signing workflows supporting both local developer environments and automated CI/CD build and release pipelines.\nDesign and implement authentication and authorization mechanisms to restrict access to signing operations and cryptographic keys to authorized users and systems.\nConfigure, integrate with, and manage Hardware Security Modules (HSMs) used to securely store and operate on cryptographic key material.\nDevelop software interfaces and services for interacting with HSMs and cryptographic infrastructure.\nDevelop monitoring, health/status reporting, logging, alarming, and operational tooling for signing infrastructure.\nDesign and scale signing services to support dozens to hundreds of engineers across multiple geographic locations.\nMaintain appropriate separation and security controls between development and production signing environments.\nTroubleshoot signing-related build, deployment, authentication, and infrastructure issues and collaborate across engineering disciplines to resolve them.\nIntegrate signing infrastructure with firmware build, release, and deployment systems.\nWork closely with security engineers to implement cryptographic, key-management, authentication, and infrastructure-security requirements.\nEvaluate third-party signing and security infrastructure solutions, support technical trade studies and proof-of-concept integrations, and contribute to build-versus-buy decisions.\nSupport the evolution of signing infrastructure from development through production, manufacturing, and silicon bring-up.\nMinimum Qualifications\nBachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline.\n5+ years of professional software engineering experience.\nExperience designing, developing, and operating high-reliability network-based or backend services in self-hosted or cloud-based environments.\nStrong software development and debugging skills.\nExperience implementing or managing authentication services, authorization mechanisms, and credentials.\nExperience developing monitoring, health checks, logging, and alarming for production network services.\nExperience integrating software services with automated build, release, or CI/CD environments.\nExperience designing software for reliability, availability, scalability, and operational support.\nAbility to work collaboratively across software, infrastructure, security, firmware, silicon, and embedded engineering teams.\nInterest and willingness to develop expertise in security infrastructure, cryptography, HSMs, and secure signing systems.\nMust be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.\nPreferred Qualifications\nExperience using PKCS#11 APIs from Python, Java, C/C++, or similar languages.\nExperience configuring, administering, or developing software interfaces to Hardware Security Modules (HSMs).\nStrong understanding of cryptography, including encryption, digital signatures, hashing, key exchange, and secure communications.\nKnowledge of X.509 certificates, certificate authorities, trust chains, key management, revocation, and certificate lifecycle management.\nFamiliarity with post-quantum cryptographic algorithms.\nFamiliarity with Executable and Linkable Format (ELF) binaries and embedded firmware build processes.\nExperience with GitLab CI or similar CI/CD systems.\nExperience deploying and operating distributed services across multiple geographic locations.\nExperience with firmware signing, secure boot, OTA firmware-update signing, or related embedded security infrastructure.\nBase Pay Range for:\nCA applicants is $230,398.00 - $322,556.85\nWA applicants is $230,398.00 - $322,556.85Other site ranges may differ\nCulture Statement\nDon’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.\nExport Control Regulations\nApplicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.\nBackground Check\nRequired for all positions: Blue’s Standard Background Check\nRequired for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation\nRequired for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training.\nRequired for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical\nBenefits\nBenefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.\nStock Options for all regular employees (working at least 20 hours/week)\nPaid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.\nDependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details. \nEqual Employment Opportunity\nBlue Origin is proud to be an Equal Opportunity/Affirmative Action Employer and is committed to attracting, retaining, and developing a highly qualified and dedicated work force. Blue Origin hires and promotes people on the basis of their qualifications, performance, and abilities. We support the establishment and maintenance of a workplace that fosters trust, equality, and teamwork. We provide all qualified applicants for employment and employees with equal opportunities for hire, promotion, and other terms and conditions of employment, regardless of their race, color, religion, sex, sexual orientation, gender identity, national origin/ethnicity, age, physical or mental disability, genetic factors, military/veteran status, or any other status or characteristic protected by federal, state, and/or local law. Blue Origin will consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state, and local laws, including the Washington Fair Chance Act, the California Fair Chance Act, the Los Angeles Fair Chance in Hiring Ordinance, and other applicable laws. For more information on “Know Your Rights,” please see here.\nAffirmative Action and Disability Accommodation\nApplicants wishing to receive information on Blue Origin’s Affirmative Action Plans, or applicants requiring a reasonable accommodation in order to participate in the application and/or interview process, please contact us at . Please note this is a publicly managed inbox. Please do not include any personal medical information in your request.","description_format":"text","description_chars":9857,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Life insurance","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Launch Services","Space Services"],"lifecycle":[{"event":"open","at":"2026-10-19T21:36:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":88,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.883,"p_room":1,"age_days":15,"expected_fill_days":45,"reasons":["conf:8","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":322556,"is_top_pay":true},"html_url":"https://alion.io/job/blue-origin-sr-software-engineer-secure-signing-infrastructure","json_url":"https://alion.io/job/blue-origin-sr-software-engineer-secure-signing-infrastructure.json","meta":{"generated_at":"2026-10-30T01:02:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1390,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3698},"rest":"https://alion.io/mcp/rest/get_company?id=3698"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblue-origin-sr-software-engineer-secure-signing-infrastructure"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblue-origin-sr-software-engineer-secure-signing-infrastructure"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblue-origin-sr-software-engineer-secure-signing-infrastructure"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blue-origin-sr-software-engineer-secure-signing-infrastructure\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblue-origin-sr-software-engineer-secure-signing-infrastructure"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2876706}},{"tool":"search_jobs","arguments":{"company":"blueorigin.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2876706},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}