Firmware Engineering Manager: Secure IoT & CRA Lead

Copeland; St. Louis (MO); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision coverage

401(k)

Job summary

Copeland, a global climate technology leader, seeks a Firmware Engineering Manager to lead the embedded systems team. You will ensure secure, scalable IoT firmware and oversee SDLC compliance with EU CRA, while guiding secure architecture, vulnerability management and OTA update delivery.

You will mentor engineers, enforce MISRA/CERT-C standards, integrate SAST/DAST in CI/CD, collaborate with product, hardware, legal, and auditors, and align roadmaps with security deadlines.

Qualifications

• 8+ years of embedded firmware development experience for IoT devices.
• 3+ years in engineering management or tech lead roles.
• Experience implementing firmware security primitives and regulatory standards.

Responsibilities

• Lead embedded firmware team with security-by-design focus.
• Drive CRA alignment (ETSI EN 303 645, IEC 62443, ISO 27001).
• Oversee OTA updates, SBOM, vulnerability management, and patching.
• Collaborate with Product, Hardware, Legal, and Cloud teams.
• Mentor engineers and enforce secure coding standards (MISRA, CERT C).

Skills

Embedded firmware

C/C++

RTOS/Embedded Linux

Security-by-design

Regulatory compliance

Leadership

CI/CD

MISRA/CERT-C

OTA updates

Vulnerability management

Education

Bachelor’s or Master’s degree in Computer/Electrical Engineering or Computer Science

Tools

HSM/TPM/Secure Elements

SBOM tools (CycloneDX, SPDX)

TLS/mTLS

Job description

Copeland, a global climate technology leader, seeks a Firmware Engineering Manager to lead the embedded systems team. You will ensure secure, scalable IoT firmware and oversee SDLC compliance with EU CRA, while guiding secure architecture, vulnerability management and OTA update delivery.

You will mentor engineers, enforce MISRA/CERT-C standards, integrate SAST/DAST in CI/CD, collaborate with product, hardware, legal, and auditors, and align roadmaps with security deadlines.