← All roles

Software Engineer, HSM Infrastructure Security, Consumer Devices

OpenAI· Consumer Devices
Apply on company site
San Francisco$347k - $445kFull-timePosted 1mo ago

About the role

Security Software Engineer to design and implement hardware-backed security foundations across OpenAI’s device ecosystem, focusing on hardening the boundary between policy systems and HSMs that protect cryptographic keys.

Responsibilities

  • Design and implement security-critical software and firmware for HSMs, secure elements, trusted execution environments, and hardware roots of trust.
  • Build and harden the policy-to-HSM boundary responsible for authorizing certificate issuance and cryptographic signing operations.
  • Develop HSM trusted applications, firmware components, host interfaces, device drivers, SDKs, or cryptographic service integrations.
  • Implement or extend cryptographic interfaces such as PKCS#11, OpenSSL providers or engines, platform key-storage APIs, or comparable hardware-security interfaces.
  • Build firmware and software that cryptographically enforces key generation, provisioning, usage, rotation, recovery, and destruction policies.
  • Design and implement HSM-backed certificate authority, code-signing, key-management, and device-identity systems.
  • Develop end-to-end cryptographic protocols spanning devices, secure hardware, policy services, and backend infrastructure.
  • Build security capabilities supporting device attestation, secure boot, factory provisioning and restoration, user registration, and authentication.
  • Design controls that make trusted software and policy changes verifiable, auditable, and subject to appropriate multi-party authorization.
  • Write, review, test, and audit secure embedded software for resource-constrained environments.
  • Develop test harnesses, emulators, fuzzers, and fault-injection tooling to validate security properties and failure behavior.
  • Threat-model hardware and software trust boundaries and translate findings into concrete engineering improvements.
  • Partner with hardware, firmware, infrastructure, application, and security teams to integrate secure-by-default capabilities into production systems.
  • Help establish engineering standards for HSM development, applied cryptography, secure key management, and certificate infrastructure.

Qualifications

  • 5+ years experience building secure embedded firmware for constrained environments
  • Deep programming experience in C, C++, or Rust.

Skills

Required:Security-critical embedded software developmentC, C++, or Rust

Benefits

  • Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
  • Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
  • 401(k) retirement plan with employer match
  • Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birth parents), plus paid medical and caregiver leave (up to 8 weeks)
  • Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
  • 13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time
  • Mental health and wellness support
  • Employer-paid basic life and disability coverage
  • Annual learning and development stipend
  • Daily meals in our offices, and meal delivery credits as eligible
  • Relocation support for eligible employees
  • Additional taxable fringe benefits, such as charitable donation matching and wellness stipends
Last updated Sep 10, 2026. Interested? Apply on the company site.

About OpenAI

ai-infrastructure-and-developmentliquid-ai-recruiting-targetllmsetter-30setter-30-2026-q1speech-to-texttext-to-speechvoice-ai-stack
Company profileWebsite

More open roles at OpenAI