Software Engineer, HSM Infrastructure Security, Consumer Devices

The role

You will design and implement hardware-backed security foundations for OpenAI's device ecosystem. This role involves developing security-critical software and firmware within or adjacent to an HSM trust boundary.

What you will do

• Design and implement security-critical software and firmware for HSMs, secure elements, TEEs, and hardware roots of trust.
• Build and harden the policy-to-HSM boundary for certificate issuance and cryptographic signing.
• Develop HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, or cryptographic service integrations.
• Implement or extend cryptographic interfaces like PKCS#11 or OpenSSL providers.
• Build firmware and software that enforces key generation, provisioning, usage, rotation, recovery, and destruction policies.
• Design and implement HSM-backed certificate authority, code-signing, key-management, and device-identity systems.
• Develop end-to-end cryptographic protocols spanning devices, secure hardware, policy services, and backend infrastructure.
• Build security capabilities for device attestation, secure boot, factory provisioning, and authentication.
• Design controls for verifiable and auditable trusted software and policy changes.
• Write, review, test, and audit secure embedded software for resource-constrained environments.

Required qualifications

• 5+ years experience building secure embedded firmware for constrained environments
• Deep programming experience in C, C++, or Rust

Nice to have

• A strong track record of designing, implementing, debugging, and shipping production systems software
• Hands-on experience developing security-critical software or firmware within, or directly adjacent to, an HSM, secure element, TEE, or hardware root of trust
• Experience developing HSM firmware or trusted applications
• Experience developing cryptographic mechanisms or hardware-accelerated cryptographic services
• Experience developing HSM device drivers, host libraries, SDKs, or middleware
• Experience developing PKCS#11 providers, mechanisms, or integrations
• Experience developing secure key-provisioning or key-injection protocols
• Experience developing HSM-backed certificate authority or code-signing systems
• Experience developing signing-policy enforcement within a hardware-backed trust boundary
• Strong knowledge of applied cryptography, digital signatures, key hierarchies, secure key management, and cryptographic protocol design

Before you apply

• Background checks for applicants will be administered in accordance with applicable law

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity.