Application close date:
Applications will be accepted on an ongoing basis until the requisition is closed.
The role is part of the In-Space Systems business unit, which is focused on addressing two of the most compelling challenges in spaceflight today: space infrastructure and increasing mobility on-orbit.
Blue Origin is seeking a talented and motivated
Software Engineer - Key Management Infrastructure to join our
Communications Security (COMSEC) team. This is a critical role that sits at the intersection of
cybersecurity, software engineering, and space systems, supporting the protection of Blue Origin's most sensitive communications, data, and mission systems.
In this role, you will be responsible for designing, developing, and operating
cryptographic key management infrastructure that underpins the security of Blue Origin's space programs. You will work in close collaboration with
DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions that meet both mission requirements and regulatory standards.
Minimum Qualifications- Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, or a related technical field
- 5+ years of professional software engineering experience
- Hands-on experience with cryptographic systems, key management infrastructure, or PKI
- Proficiency in one or more programming languages, including Python, Java, C, or C++, Golang
- Experience with Hardware Security Modules (HSMs) such as Thales Luna, Entrust nShield, or AWS CloudHSM
- Familiarity with DevOps tools and practices, including CI/CD pipelines, version control (Git), and infrastructure automation
- Working knowledge of containerization and orchestration platforms such as Docker and Kubernetes
- Understanding of NIST cryptographic standards (FIPS 140-2/3, SP 800-57, SP 800-131A)
- Ability to work collaboratively across multidisciplinary teams, including hardware, software, and security stakeholders
- Strong analytical and problem-solving skills with a high attention to detail
- Excellent written and verbal communication skills
Preferred Qualifications - Active Top Secret (TS) security clearance, or eligibility and willingness to obtain one
- Experience with COMSEC operations and government cryptographic key management systems (e.g., EKMS, SKL, KMI, DIAS)
- Familiarity with FIPS 140-3 validated encryption products and associated key management procedures
- Experience with cloud-based key management solutions, including AWS KMS, Azure Key Vault, Google Cloud KMS, or HashiCorp Vault
- Exposure to zero-trust security architecture principles and implementation
- Experience in aerospace, defense, or government program environments
- Familiarity with ITAR/EAR regulations and their implications for software and systems development
- Knowledge of secure software development lifecycle frameworks and practices
- Experience working in Agile/Scrum development environments
- Relevant professional certifications such as:
- CISSP (Certified Information Systems Security Professional)
- Certified Cryptography Engineer (CCE)
- AWS Certified Security - Specialty
Base Pay Range for:
CO applicants is $150,931.00 - $211,303.05
Other site ranges may differBenefits- Benefits include: Medical, dental, vision, basic and supplemental life insurance, paid parental leave, short and long-term disability, 401(k) with a company match of up to 5%, and an Education Support Program.
- Stock Options for all regular employees (working at least 20 hours/week)
- Paid Time Off: Up to four (4) weeks per year based on weekly scheduled hours, and up to 14 company-paid holidays.
- Dependent on role type and job level, employees may be eligible for benefits and bonuses based on the company's intent to reward individual contributions and enable them to share in the company's results, or other factors at the company's sole discretion. Bonus amounts and eligibility are not guaranteed and subject to change and cancellation. Please check with your recruiter for more details.