Firmware Engineering Manager: CRA Security & OTA

Copeland; St. Louis (MO); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision coverage

401(k)

Paid parental leave

Vacation and holiday leave

Job summary

Copeland is seeking an experienced Firmware Engineering Manager to lead our embedded systems team with a focus on technical execution and EU CRA alignment. You will guide secure, scalable IoT firmware while ensuring compliance across the SDLC, enabling secure-by-design devices and continuous vulnerability management.

You will partner with Product, Hardware, Legal, and Cloud teams to align security requirements with hardware choices and regulatory expectations.

Qualifications

• 8+ years embedded firmware development (C/C++, RTOS, Embedded Linux).
• 3+ years in leadership, tech lead, or supervisory role.
• Experience implementing firmware security primitives (Secure Boot, HSM/TPM, TLS).
• Hands-on with regulatory standards (EU CRA, ETSI 303 645, IEC 62443).

Responsibilities

• Security-focused firmware architecture design and CRA implementation.
• Automated SBOM & dependency management within CI/CD pipelines.
• OTA update mechanisms with secure patching workflows.
• Vulnerability, incident management and rapid patch deployment.
• Documentation for CRA compliance and conformity audits.

Skills

8+ years embedded firmware development

3+ years engineering management

Secure Boot & cryptographic storage

CRA/EU standards compliance

US work authorization

Education

Bachelor’s or Master’s in Computer/Electrical Engineering or CS

Job description

Copeland is seeking an experienced Firmware Engineering Manager to lead our embedded systems team with a focus on technical execution and EU CRA alignment. You will guide secure, scalable IoT firmware while ensuring compliance across the SDLC, enabling secure-by-design devices and continuous vulnerability management.

You will partner with Product, Hardware, Legal, and Cloud teams to align security requirements with hardware choices and regulatory expectations.