Firmware Engineering Manager — Secure IoT & CRA Compliance

Copeland; Sidney (OH); On-site; USD 140,000 - 190,000; Full time

Job summary

Copeland is seeking an experienced Firmware Engineering Manager to lead an embedded systems team focused on secure, compliant IoT products. You will drive architecture, OTA updates, and vulnerability management while aligning with regulatory CRA requirements.

You will bridge low-level firmware with security architecture and regulatory processes, ensuring secure-by-design practices and collaboration with multiple departments and external auditors.

Qualifications

• 8+ years in embedded firmware development for IoT devices.
• 3+ years in engineering management or tech lead roles.
• Hands-on firmware security primitives installation (Secure Boot, TLS, secure storage).
• Experience with regulatory compliance standards (EU CRA, ETSI EN 303 645, NIST SP 800-213).
• US work authorization; no sponsorship available.

Responsibilities

• Lead embedded firmware team with focus on secure, scalable IoT products.
• Drive CRA-compliant architecture, secure boot, encryption, and OTA update pipelines.
• Oversee vulnerability management, risk assessments, and technical documentation for CRA CE marking.
• Coordinate cross-functional work with Product, Hardware, Legal, and Cloud teams.
• Partner with auditors and security researchers for assessments and testing.

Skills

Embedded firmware

Engineering management

Firmware security

CRA compliance

SAST/DAST

CI/CD

Hardware security

Regulatory standards

Education

Bachelor's degree in engineering

Tools

MISRA/CERT C

TLS/mTLS

Secure Boot

SBOM tooling

HSM/TPM

Job description

Copeland is seeking an experienced Firmware Engineering Manager to lead an embedded systems team focused on secure, compliant IoT products. You will drive architecture, OTA updates, and vulnerability management while aligning with regulatory CRA requirements.

You will bridge low-level firmware with security architecture and regulatory processes, ensuring secure-by-design practices and collaboration with multiple departments and external auditors.