Software Engineer – Key Management Infrastructure III

Blue Origin•Littleton, CO

13d

About The Position

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! The role is part of the In-Space Systems business unit, which is focused on addressing two of the most compelling challenges in spaceflight today: space infrastructure and increasing mobility on-orbit. Blue Origin is seeking a talented and motivated Software Engineer – Key Management Infrastructure to join our Communications Security (COMSEC) team. This is a critical role that sits at the intersection of cybersecurity, software engineering, and space systems, supporting the protection of Blue Origin's most sensitive communications, data, and mission systems. In this role, you will be responsible for designing, developing, and operating cryptographic key management infrastructure that underpins the security of Blue Origin's space programs. You will work in close collaboration with DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions that meet both mission requirements and regulatory standards.

Requirements

Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, or a related technical field
5+ years of professional software engineering experience
Hands-on experience with cryptographic systems, key management infrastructure, or PKI
Proficiency in one or more programming languages, including Python, Java, C, or C++, Golang
Experience with Hardware Security Modules (HSMs) such as Thales Luna, Entrust nShield, or AWS CloudHSM
Familiarity with DevOps tools and practices, including CI/CD pipelines, version control (Git), and infrastructure automation
Working knowledge of containerization and orchestration platforms such as Docker and Kubernetes
Understanding of NIST cryptographic standards (FIPS 140-2/3, SP 800-57, SP 800-131A)
Ability to work collaboratively across multidisciplinary teams, including hardware, software, and security stakeholders
Strong analytical and problem-solving skills with a high attention to detail
Excellent written and verbal communication skills

Nice To Haves

Active Top Secret (TS) security clearance, or eligibility and willingness to obtain one
Experience with COMSEC operations and government cryptographic key management systems (e.g., EKMS, SKL, KMI, DIAS)
Familiarity with FIPS 140-3 validated encryption products and associated key management procedures
Experience with cloud-based key management solutions, including AWS KMS, Azure Key Vault, Google Cloud KMS, or HashiCorp Vault
Exposure to zero-trust security architecture principles and implementation
Experience in aerospace, defense, or government program environments
Familiarity with ITAR/EAR regulations and their implications for software and systems development
Knowledge of secure software development lifecycle frameworks and practices
Experience working in Agile/Scrum development environments
Relevant professional certifications such as: CISSP (Certified Information Systems Security Professional), CompTIA Security+, Certified Cryptography Engineer (CCE), AWS Certified Security – Specialty

Responsibilities

Designing, developing, and operating cryptographic key management infrastructure.
Working in close collaboration with DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions.
Meeting both mission requirements and regulatory standards.