Senior IoT Product Security Architect

Enphase Energy, Inc.; Fremont (AL); On-site; USD 160,000 - 226,000; Full time

Benefits offered by this job

Competitive compensation

Equity participation

Bonus eligibility

Health benefits

Job summary

Enphase Energy is hiring a Product Security Architect to drive product security across our hardware portfolio, including gateways, microinverters, BMS, and related devices. This senior, hands-on role partners with firmware, hardware, cloud, and product teams to implement secure design, testing, and certification.

You will own end-to-end security architectures, including secure boot, key management, OTA updates, regulatory compliance (CRA and RED), vulnerability management, and external testing,

Qualifications

• 12+ years of product/embedded security experience.
• Expert in ARM security architectures and secure boot.
• Hands-on cryptography and key management experience.
• Experience with OTA update architectures and secure delivery.

Responsibilities

• Architect secure boot chains across product portfolio including gateways, microinverters, and BMS.
• Own end-to-end key lifecycle per device and fleet-scale PKI infrastructure.
• Lead secure OTA updates with signed images, anti-rollback, and fail-safe recovery.
• Ensure regulatory compliance with EU CRA, RED Act and related standards.
• Define and drive product security test strategy and SBOM-driven analysis.
• Manage vulnerability management/PSIRT and coordinated disclosure.

Skills

Product security

Embedded security

ARM TrustZone

TLS

PKI

Vulnerability management

Threat modeling

CAN bus security

Secure OTA

C/C++ for embedded

SBOM tooling

Education

BE/BTech/MS/MTech in CS/EE

Tools

CycloneDX

SPDX

Job description

Enphase Energy is hiring a Product Security Architect to drive product security across our hardware portfolio, including gateways, microinverters, BMS, and related devices. This senior, hands-on role partners with firmware, hardware, cloud, and product teams to implement secure design, testing, and certification.

You will own end-to-end security architectures, including secure boot, key management, OTA updates, regulatory compliance (CRA and RED), vulnerability management, and external testing,