POSTING ACTIVE · REQ-926EA · FY26.Q3

Software Engineer – Key Management Infrastructure III

Blue Origin
[ COMPANY ]
[ LOCATION ]
[ POSTED ]
[ REQ ID ]
[ COMPENSATION RANGE · ANNUAL · BASE ]
$150,931 – $211,303USD
MIDPOINT
$181,117
SPREAD
$60,372
LEVEL
LEAD
TECHNICAL STACK · 6 TAGS
§ 01OVERVIEW

Application close date:

Applications will be accepted on an ongoing basis until the requisition is closed.

At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re working to develop reusable, safe, and low-cost space vehicles and systems within a culture of safety, collaboration, and inclusion. Join our team of problem solvers as we add new chapters to the history of spaceflight! 

The role is part of the In-Space Systems business unit, which is focused on addressing two of the most compelling challenges in spaceflight today: space infrastructure and increasing mobility on-orbit.

Blue Origin is seeking a talented and motivated Software Engineer – Key Management Infrastructure to join our Communications Security (COMSEC) team. This is a critical role that sits at the intersection of cybersecurity, software engineering, and space systems, supporting the protection of Blue Origin's most sensitive communications, data, and mission systems.

In this role, you willbe responsible fordesigning, developing, andoperatingcryptographic key management infrastructure that underpins the security of Blue Origin's space programs. You will work in close collaboration with DevOps and Hardware teams to deliver secure, scalable, and reliable key management solutions that meet both mission requirements and regulatory standards.

§ 02MINIMUM QUALIFICATIONS
  • Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, or a related technical field

  • 5+ years of professional software engineering experience

  • Hands-on experience with cryptographic systems, key management infrastructure, or PKI

  • Proficiencyin one or more programming languages, including Python, Java, C, or C++, Golang

  • Experience with Hardware Security Modules (HSMs) such as Thales Luna, EntrustnShield, or AWSCloudHSM

  • Familiarity with DevOps tools and practices, including CI/CD pipelines, version control (Git), and infrastructure automation

  • Working knowledge of containerization and orchestration platforms such as Docker and Kubernetes

  • Understanding of NIST cryptographic standards (FIPS 140-2/3, SP 800-57, SP 800-131A)

  • Ability to work collaboratively across multidisciplinary teams, including hardware, software, and security stakeholders

  • Strong analytical and problem-solving skills witha highattention to detail

  • Excellent written and verbal communication skills

§ 03PREFERRED QUALIFICATIONS
  • Active Top Secret (TS) security clearance, or eligibility and willingness to obtain one

  • Experience with COMSEC operations and government cryptographic key management systems (e.g., EKMS, SKL, KMI, DIAS)

  • Familiarity with FIPS 140-3 validated encryption products and associated key management procedures

  • Experience with cloud-based key management solutions, including AWS KMS, Azure Key Vault, Google Cloud KMS, orHashiCorpVault

  • Exposure to zero-trust security architecture principles and implementation

  • Experience in aerospace, defense, or government program environments

  • Familiarity with ITAR/EAR regulations and their implications for software and systems development

  • Knowledge of secure software development lifecycleframeworks and practices

  • Experience working in Agile/Scrum development environments

  • Relevant professional certifications such as:

  • CISSP (Certified Information Systems Security Professional)

§ 04COMPTIA SECURITY+
§ 05CERTIFIED CRYPTOGRAPHY ENGINEER (CCE)
§ 06AWS CERTIFIED SECURITY – SPECIALTY
§ 07SECTION

Base Pay Range for:

CO applicants is $150,931.00 - $211,303.05
§ 08OTHER SITE RANGES MAY DIFFER
§ 09CULTURE STATEMENT

Don’t meet all desired requirements? Studies have shown that some people are less likely to apply to jobs unless they meet every single desired qualification. At Blue Origin, we are dedicated to building an authentic workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every desired qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

§ 10REQUIREMENTS

Description

  • Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, or a related technical field
  • 5+ years of professional software engineering experience
  • Hands-on experience with cryptographic systems, key management infrastructure, or PKI
  • Proficiency in one or more programming languages, including Python, Java, C, or C++, Golang
  • Experience with Hardware Security Modules (HSMs) such as Thales Luna, Entrust nShield, or AWS CloudHSM
  • Familiarity with DevOps tools and practices, including CI/CD pipelines, version control (Git), and infrastructure automation
  • Working knowledge of containerization and orchestration platforms such as Docker and Kubernetes
  • Understanding of NIST cryptographic standards (FIPS 140-2/3, SP 800-57, SP 800-131A)
  • Ability to work collaboratively across multidisciplinary teams, including hardware, software, and security stakeholders
  • Strong analytical and problem-solving skills with a high attention to detail
  • Excellent written and verbal communication skills
QUESTIONS AND ANSWERS
How much does the Software Engineer – Key Management Infrastructure III at Blue Origin pay?
The posting lists a range of $151K–$211K per year. Ranges reflect what Blue Origin publicly declared on the source posting.
Where is this Software Engineer – Key Management Infrastructure III role based?
The role is based in Denver, CO.
What experience does Blue Origin expect for this role?
The posting is tagged as a lead-level role, typically 7+ years of experience. Check the requirements section for specifics.
How was this posting sourced?
This role was pulled directly from Blue Origin's Workday careers site. Apply links open in the employer's own ATS — no reposts or aggregator middleware.
[ APPLICATION ROUTE ]WORKDAY · External ATS

Apply links open in the employer's official ATS. Always verify recruitment messages on the company's careers page before sharing personal information.

[ SHARE THIS ROLE ]