Firmware Engineering Manager: Secure OTA & CRA Compliance

Copeland; Town of Florida (NY); On-site; USD 140,000 - 195,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision

401(k)

Flexible time off

Parental leave

Job summary

Copeland is seeking an experienced Firmware Engineering Manager in the United States to lead our embedded team. You will focus on technical execution and CRA regulatory alignment, building secure IoT firmware and ensuring the SDLC meets EU cybersecurity requirements while supporting OTA updates.

You will bridge low-level development, security architecture, and compliance with a team, driving secure-by-design practices, vulnerability handling, and audits across the product lifecycle.

Qualifications

• Bachelor’s or Master’s degree in Computer Engineering, Electrical Engineering, Computer Science, or equivalent practical experience.
• Experience leading embedded firmware teams and regulatory alignment.

Responsibilities

• Drive firmware security controls aligned with CRA standards and secure hardware foundations.
• Establish SBOM pipelines to track dependencies in build systems.
• Lead secure OTA update mechanisms and patch management.
• Implement vulnerability management and CRA reporting processes.
• Oversee technical documentation for CRA CE marking and audits.
• Mentor embedded firmware engineers and enforce secure coding practices.

Skills

Security-by-design

Security-by-default

Secure coding standards

MISRA/CERT-C

Code reviews

CI/CD security tooling

OTA security

Vulnerability management

CRA compliance

Education

Bachelor’s or Master’s degree in Computer Engineering, Electrical Engineering, Computer Science

Tools

ARM Cortex-M/TrustZone

RISC-V

ESP32

CycloneDX / SPDX

SAST/DAST / fuzz testing tools

Job description

Copeland is seeking an experienced Firmware Engineering Manager in the United States to lead our embedded team. You will focus on technical execution and CRA regulatory alignment, building secure IoT firmware and ensuring the SDLC meets EU cybersecurity requirements while supporting OTA updates.

You will bridge low-level development, security architecture, and compliance with a team, driving secure-by-design practices, vulnerability handling, and audits across the product lifecycle.