> Markdown version of [/jobs/ext/4365459-sr-software-engineer-secure-signing-infrastructure](https://www.wearedevelopers.com/jobs/ext/4365459-sr-software-engineer-secure-signing-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Software Engineer - Secure Signing Infrastructure - **Company:** Blue Origin - **Location:** Van Horn, TX, United States - **Experience:** Expert - **Salary:** $230,398 - $322,557 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Computer-Aided Design, Application Programming Interfaces (APIs), Biometrics, C++ (Programming Language), Cloud Computing, Cyber Security, Computer Engineering, System Configuration, Continuous Integration, Software Debugging, Digital Signature, Embedded Software, Firmware, Hardware Security Module, Python (Programming Language), Key Management, Network Service, X.509, Release Management, Software Engineering, Data Logging, Backend, Gitlab-ci, Information Technology, Build Process, U-Boot - **Published:** October 16, 2026 - **Apply:** https://diversityjobs.com/career/18649456/Sr-Software-Engineer-Secure-Signing-Infrastructure-Texas-Van-Horn ## About the Role * Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline. * 5+ years of professional software engineering experience. * Experience designing, developing, and operating high-reliability network-based or backend services in self-hosted or cloud-based environments. * Strong software development and debugging skills. * Experience implementing or managing authentication services, authorization mechanisms, and credentials. * Experience developing monitoring, health checks, logging, and alarming for production network services. * Experience integrating software services with automated build, release, or CI/CD environments. * Experience designing software for reliability, availability, scalability, and operational support. * Ability to work collaboratively across software, infrastructure, security, firmware, silicon, and embedded engineering teams. * Interest and willingness to develop expertise in security infrastructure, cryptography, HSMs, and secure signing systems. * Must be a U.S. citizen or national, U.S. permanent resident (current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. Preferred Qualifications * Experience using PKCS#11 APIs from Python, Java, C/C++, or similar languages. * Experience configuring, administering, or developing software interfaces to Hardware Security Modules (HSMs). * Strong understanding of cryptography, including encryption, digital signatures, hashing, key exchange, and secure communications. * Knowledge of X.509 certificates, certificate authorities, trust chains, key management, revocation, and certificate lifecycle management. * Familiarity with post-quantum cryptographic algorithms. * Familiarity with Executable and Linkable Format (ELF) binaries and embedded firmware build processes. * Experience with GitLab CI or similar CI/CD systems. * Experience deploying and operating distributed services across multiple geographic locations. * Experience with firmware signing, secure boot, OTA firmware-update signing, or related embedded security infrastructure. ## Description As part of a hardworking team of engineers and specialists, you will design, develop, deploy, and operate secure signing infrastructure supporting TeraWave custom silicon and embedded systems. You will develop highly available network-based services used to sign and encrypt firmware binaries, supporting both local developer workflows and automated CI/CD build and release pipelines. You will work closely with security, silicon, firmware, software, manufacturing, and infrastructure teams to ensure signing keys and cryptographic operations are securely controlled while providing reliable, scalable, and highly available signing services to engineering teams across multiple geographic locations. Special Mentions * Relocation provided * Travel expected up to 20% of the time * Interviews will include a technical assessment Responsibilities include but are not limited to: * Design, develop, deploy, and maintain highly available network-based services for signing and encrypting firmware binaries. * Develop secure signing workflows supporting both local developer environments and automated CI/CD build and release pipelines. * Design and implement authentication and authorization mechanisms to restrict access to signing operations and cryptographic keys to authorized users and systems. * Configure, integrate with, and manage Hardware Security Modules (HSMs) used to securely store and operate on cryptographic key material. * Develop software interfaces and services for interacting with HSMs and cryptographic infrastructure. * Develop monitoring, health/status reporting, logging, alarming, and operational tooling for signing infrastructure. * Design and scale signing services to support dozens to hundreds of engineers across multiple geographic locations. * Maintain appropriate separation and security controls between development and production signing environments. * Troubleshoot signing-related build, deployment, authentication, and infrastructure issues and collaborate across engineering disciplines to resolve them. * Integrate signing infrastructure with firmware build, release, and deployment systems. * Work closely with security engineers to implement cryptographic, key-management, authentication, and infrastructure-security requirements. * Evaluate third-party signing and security infrastructure solutions, support technical trade studies and proof-of-concept integrations, and contribute to build-versus-buy decisions. * Support the evolution of signing infrastructure from development through production, manufacturing, and silicon bring-up., Applicants for employment at Blue Origin must be a U.S. citizen or national, U.S. permanent resident (i.e. current Green Card holder), or lawfully admitted into the U.S.as a refugee or granted asylum. Background Check * Required for all positions: Blue's Standard Background Check * Required for Certain Job Profiles: Defense Biometric Identification System (DBIDS) background check if at any time the role requires one to be on a military installation * Required for Certain Job Profiles: Drivers who operate Commercial Motor Vehicles with a Gross Vehicle Weight (GVW), Gross Vehicle Weight Rating (GVWR) or combination of power unit and trailer that meets or exceeds 10,001 lbs. and/or transports placardable amounts of hazardous materials by ground in any vehicle on a public road while in commerce, may be subject to additional Federal Motor Carrier Safety Regulations including: Driver Qualification Files, Medical Certification (obtained before onboarding), Road Test, Hours of Service, Drug and Alcohol Testing, vehicle inspection requirements, CDL requirements (if applicable) and hazardous materials transportation/shipping training. * Required for certain Job Profiles: Ability to obtain and maintain Merchant Mariner Credential, which includes pre-employment and random drug testing as well as DOT physical