Senior Security Engineer, Embedded

Enphase Energy, Inc.; Bengaluru; Hybrid; INR 1,400,000 - 2,300,000; Full time

Benefits offered by this job

Competitive compensation

Global IoT energy projects

Collaborative environment

Job summary

Enphase Energy, Inc. is seeking a Security Engineer, Embedded to secure the IQ Gateway and IQ Microinverter platforms. You will work with firmware, cloud, hardware, and product teams to implement secure boot, device identity, TLS, and OTA security for ARM-based IoT devices.

Join a global energy tech leader driving secure, scalable solar home solutions and collaborate across cross-functional teams to uphold defense-in-depth security across embedded systems.

Qualifications

• BE/BTech/MS/MTech in Computer Science, Electrical Engineering, Electronics.
• 4+ years of experience in embedded systems security, product security, firmware security, or IoT security.

Responsibilities

• Develop and maintain secure boot mechanisms, chain-of-trust implementations, and secure provisioning processes for embedded devices.
• Implement and support hardware Root-of-Trust solutions, secure key storage, and device identity management.
• Design and maintain secure communication frameworks using TLS/mTLS, PKI, and certificate-based authentication.
• Support secure OTA update mechanisms, including signed firmware updates, integrity verification, rollback protection, and recovery features.
• Participate in threat modeling, security reviews, and risk assessments for embedded and IoT products.
• Collaborate with firmware, hardware, cloud, and security teams to integrate security-by-design principles into product development.
• Implement security controls for device-to-cloud communication and fleet management platforms.
• Contribute to securing IoT communication interfaces including BLE, Wi-Fi, Ethernet, and PLC/powerline communication.
• Perform security testing, vulnerability analysis, and remediation activities for embedded systems.
• Stay current with emerging embedded and IoT security threats, technologies, and industry standards.

Skills

Embedded security

C/C++

ARM TrustZone

TLS/mTLS

Threat modeling

Secure boot

Secure storage

Device identity management

Education

BE/BTech/MS/MTech in Computer Science, Electrical Engineering, Electronics

Tools

Embedded Linux

RTOS

Job description

Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.

Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!

This role at Enphase requires working onsite3 days a week, with plans to transition back to a full 5 day in office schedule over time.

About the Role

Join Enphase Energy as a Security Engineer, Embedded and help secure the IQ Gateway and IQ Microinverter platforms, ARM-based IoT devices that connect millions of solar homes worldwide through Wi-Fi, Ethernet, and cellular networks.

In this role, you will work closely with firmware, cloud, hardware, and product teams to implement security features across embedded systems and contribute to building highly secure and scalable energy solutions. You will help develop and enhance secure boot mechanisms, device identity and provisioning, secure communications, OTA security, and device hardening across the Enphase embedded product portfolio.

What You Will Be Doing

• Develop and maintain secure boot mechanisms, chain-of-trust implementations, and secure provisioning processes for embedded devices.
• Implement and support hardware Root-of-Trust solutions, secure key storage, and device identity management.
• Design and maintain secure communication frameworks using TLS/mTLS, PKI, and certificate-based authentication.
• Support secure OTA update mechanisms, including signed firmware updates, integrity verification, rollback protection, and recovery features.
• Participate in threat modeling, security reviews, and risk assessments for embedded and IoT products.
• Collaborate with firmware, hardware, cloud, and security teams to integrate security-by-design principles into product development.
• Implement security controls for device-to-cloud communication and fleet management platforms.
• Contribute to securing IoT communication interfaces including BLE, Wi-Fi (802.11), Ethernet, and PLC/powerline communication.
• Perform security testing, vulnerability analysis, and remediation activities for embedded systems.
• Stay current with emerging embedded and IoT security threats, technologies, and industry standards.

Who You Are and What You Bring

• BE/BTech/MS/MTech in Computer Science, Electrical Engineering, Electronics, or related field.
• 4+ years of experience in embedded systems security, product security, firmware security, or IoT security.
• Hands‑on experience with secure boot, chain‑of‑trust concepts, Trusted Execution Environments (TEE), and ARM TrustZone.
• Experience with cryptographic technologies including AES, RSA, ECC, secure key management, and secure storage.
• Knowledge of TLS/mTLS, PKI, certificate management, and secure communication protocols.
• Experience working with embedded Linux and/or RTOS‑based platforms.
• Programming experience in C/C++ with embedded device development.
• Familiarity with security testing, threat modeling methodologies (STRIDE preferred), and vulnerability assessment techniques.
• Understanding of IoT networking technologies including BLE, Wi‑Fi, Ethernet, and cellular connectivity.
• Strong problem‑solving skills and ability to work effectively in cross‑functional teams.

Nice to Have

• Experience with HSMs, TPMs, secure elements, or hardware security features.
• Exposure to OTA firmware update frameworks and firmware signing processes.
• Familiarity with security standards such as IEC 62443, ETSI EN 303 645, or NIST IoT guidance.
• Experience with cloud‑connected IoT products and device lifecycle management.

What We Offer

• Competitive compensation and comprehensive employee benefits.
• Opportunity to work on security for large‑scale global IoT energy systems.
• Exposure to cutting‑edge embedded and IoT security technologies.
• Collaborative, innovation‑driven work environment.
• Career growth and development opportunities.