Software Engineer – Key Management Infrastructure III

Applications will be accepted on an ongoing basis until the requisition is closed.

About the role

This role is part of the In-Space Systems business unit, focused on addressing two of the most compelling challenges in spaceflight today: space infrastructure and increasing mobility on-orbit. As a Software Engineer – Key Management Infrastructure on the Communications Security (COMSEC) team, you will design, develop, and operate cryptographic key management infrastructure that underpins the security of Blue Origin's space programs. You will work in close collaboration with DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions that meet both mission requirements and regulatory standards.

Responsibilities

• Design, develop, and operate cryptographic key management infrastructure supporting Blue Origin's most sensitive communications, data, and mission systems.
• Collaborate with DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, or a related technical field.
• 5+ years of professional software engineering experience.
• Hands-on experience with cryptographic systems, key management infrastructure, or PKI.
• Proficiency in one or more programming languages, including Python, Java, C, C++, or Golang.
• Experience with Hardware Security Modules (HSMs) such as Thales Luna, Entrust nShield, or AWS CloudHSM.
• Familiarity with DevOps tools and practices, including CI/CD pipelines, version control (Git), and infrastructure automation.
• Working knowledge of containerization and orchestration platforms such as Docker and Kubernetes.
• Understanding of NIST cryptographic standards (FIPS 140-2/3, SP 800-57, SP 800-131A).
• Ability to work collaboratively across multidisciplinary teams, including hardware, software, and security stakeholders.
• Strong analytical and problem-solving skills with a high attention to detail.
• Excellent written and verbal communication skills.
• Must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum.

Qualifications

• Active Top Secret (TS) security clearance, or eligibility and willingness to obtain one.
• Experience with COMSEC operations and government cryptographic key management systems (e.g., EKMS, SKL, KMI, DIAS).
• Familiarity with FIPS 140-3 validated encryption products and associated key management procedures.
• Experience with cloud-based key management solutions, including AWS KMS, Azure Key Vault, Google Cloud KMS, or HashiCorp Vault.
• Exposure to zero-trust security architecture principles and implementation.
• Experience in aerospace, defense, or government program environments.
• Familiarity with ITAR/EAR regulations and their implications for software and systems development.
• Knowledge of secure software development lifecycle frameworks and practices.
• Experience working in Agile/Scrum development environments.
• Relevant professional certifications such as CISSP, CompTIA Security+, Certified Cryptography Engineer (CCE), or AWS Certified Security – Specialty.

Benefits

• Medical, dental, and vision insurance.
• Basic and supplemental life insurance.
• Paid parental leave.
• Short and long-term disability.
• 401(k) with a company match of up to 5%.
• Education Support Program.
• Stock options for all regular employees (working at least 20 hours/week).
• Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.
• Dependent on role type and job level, employees may be eligible for additional benefits and bonuses.

Pay

Base pay range for CO applicants is $150,931.00 - $211,303.05. Other site ranges may differ.

Background checks are required for all positions. Additional checks may include Defense Biometric Identification System (DBIDS), DOT physicals, drug and alcohol testing, CDL requirements, and hazardous materials transportation/shipping training, depending on the role.