Software Engineer, HSM Infrastructure Security, Consumer Devices

The role

You will design and implement hardware-backed security foundations and security-critical software or firmware for the device ecosystem. This role focuses on hardening the boundary between policy systems and HSMs to protect sensitive cryptographic keys.

What you will do

• Design and implement security-critical software and firmware for HSMs, secure elements, TEEs, and hardware roots of trust.
• Build and harden the policy-to-HSM boundary for certificate issuance and cryptographic signing.
• Develop HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, or cryptographic service integrations.
• Implement or extend cryptographic interfaces like PKCS#11 or OpenSSL providers.
• Build firmware and software that enforces key generation, provisioning, usage, rotation, recovery, and destruction policies.
• Design and implement HSM-backed certificate authority, code-signing, key-management, and device-identity systems.
• Develop end-to-end cryptographic protocols spanning devices, secure hardware, policy services, and backend infrastructure.
• Build security capabilities for device attestation, secure boot, factory provisioning, and authentication.
• Design controls for verifiable and auditable trusted software and policy changes.
• Write, review, test, and audit secure embedded software for resource-constrained environments.

Required qualifications

• 5+ years experience building secure embedded firmware for constrained environments
• Deep programming experience in C, C++, or Rust

Nice to have

• A strong track record of designing, implementing, debugging, and shipping production systems software
• Hands-on experience developing security-critical software or firmware within, or directly adjacent to, an HSM, secure element, TEE, or hardware root of trust
• Experience developing HSM firmware or trusted applications
• Experience developing cryptographic mechanisms or hardware-accelerated cryptographic services
• Experience developing HSM device drivers, host libraries, SDKs, or middleware
• Experience developing PKCS#11 providers, mechanisms, or integrations
• Experience developing secure key-provisioning or key-injection protocols
• Experience developing HSM-backed certificate authority or code-signing systems
• Experience developing signing-policy enforcement within a hardware-backed trust boundary
• Strong knowledge of applied cryptography, digital signatures, key hierarchies, secure key management, and cryptographic protocol design

About the company

OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity.