Embedded Security Architect
Enphase Energy2 hours ago
Bengaluru, IndiaSenior
Responsibilities
- Architect secure boot chains with hardware-anchored roots of trust, signed bootloaders, anti-rollback controls, and eFuse/OTP provisioning.
- Design hardware roots of trust, device identity provisioning, secure-element and PUF integrations, and cryptographic key lifecycles.
- Build mutual-TLS and PKI frameworks with per-device certificates, certificate lifecycle management, and secure key storage.
- Design secure OTA update architectures using signed and encrypted images, A/B partitioning, anti-rollback, and fail-safe recovery.
- Lead STRIDE threat modeling and risk assessments for embedded device fleets.
- Secure cloud-to-device trust and harden BLE, Wi-Fi, Ethernet, and PLC/powerline communications.
- Drive security integration and security-by-design standards across firmware, hardware, cloud, and product teams.
Requirements
- BE/BTech/MS/MTech in Computer Science, Electrical Engineering, or a related field.
- 8+ years of experience in embedded security or IoT security architecture.
- Expertise in ARM TrustZone, TEE/OP-TEE, secure bootloaders, chain of trust, and hardware roots of trust on ARM Cortex-A/M.
- Experience with HSM/TPM integration, secure elements, cryptographic key management, AES, RSA, ECC, and hardware cryptographic accelerators.
- Strong knowledge of TLS/mTLS, PKI, certificate lifecycle management, and secure communication protocol design.
- Familiarity with BLE, Wi-Fi, Ethernet, and PLC/powerline communication protocols.
- Knowledge of IEC 62443, ETSI EN 303 645, and the EU Cyber Resilience Act.
- Proficiency in C/C++ and embedded development on RTOS and embedded Linux for ARM Cortex-A/M targets.
- Preferred qualifications include secure OTA pipeline experience, side-channel analysis and hardware fault-injection countermeasure experience, and certifications such as CISSP-ISSAP, GPEN, or GXPN.
Benefits
- Competitive compensation and comprehensive employee benefits.
- Opportunity to architect security for large-scale global IoT energy systems and exposure to embedded and IoT security technologies.
- Collaborative, innovation-driven work environment with career growth and development opportunities.
- The role requires working onsite 3 days per week, with plans to transition to a full 5-day in-office schedule over time.