Sr EdgeMicrocontroller Firmware Engineer CC

duvari group; Minneapolis (MN); Hybrid; USD 140,000 - 160,000; Full time

Job summary

duvari group in Minneapolis, MN, is seeking a Senior Edge Engineer to own the bare-metal firmware and secure OTA on ARM Cortex-M devices. The role focuses on secure boot, TLS, Modbus RTU, and CAN bus integration with an eye toward scalable edge platforms.

You will collaborate across hardware and software teams, mentor junior engineers, and influence the direction of the gateway platform as edge computing needs evolve in industrial IoT environments.

Qualifications

• 7+ years embedded firmware experience on ARM Cortex-M devices.
• Fluent in C and modern C++ for resource-constrained MCUs.
• Experience with MQTT/TLS and secure OTA workflows.
• Proficient with Modbus RTU and CAN bus on bare-metal systems.
• Knowledge of secure boot and hardware-root-of-trust concepts.
• Production-grade firmware with OTA safety and rollback handling.

Responsibilities

• Lead security uplift on the current edge device platform.
• Evaluate cloud protocol feasibility for MQTT-over-TLS with mutual auth.
• Develop and abstract the field-side protocol layer (Modbus RTU/CAN).
• Define OTA strategy: staged rollouts, rollback and recovery.
• Manage provisioning: per-device mutual-TLS credentials and key injection.

Skills

ARM Cortex-M

C/C++

Embedded systems

Security boot and OTA

Modbus RTU

CAN bus

MQTT/TLS

JTAG/SWD

Education

Bachelor's degree in Electrical/Computer Engineering or related field

Tools

NXP toolchains

mbedTLS/WolfSSL

Yocto/Buildroot

JTAG debugging tools

Job description

Senior Edge Engineer – Firmware & MCU

1) C/C++, Embedded Firmware and MCU Design Engineering Experience (Greenfield)

2) Edge/Gateway experience out through the devices (large scale, distributed device experience)

3) EE/Hardware Design experience a plus

We are looking for a Senior Edge Engineer to help build the next generation engineering team. This role may work remote, but we would prefer a candidate to be in the Midwest.

Our brand is a leading IoT connectivity solution for equipment via hardware, SaaS, and software. Its gateways and cloud connected solutions enable real-time monitoring, control, analytics, and commercialization support. We provide integration, development, and go-to-market services.

The job:

As our Senior Edge Engineer, you will be the team’s depth on bare-metal firmware. Day-to-day that means secure boot, signed firmware, MQTT-over-TLS to the cloud, and the field-side protocol layer (Modbus RTU, plus CAN bus where required) on our current ARM Cortex-M class device. You will work into the team’s embedded-Linux track as our next-generation gateway platform comes online. You will provide occasional mentorship of early-career engineers on cross functional firmware teams within the organization.

Your primary responsibilities will be:

• Security uplift on the current device platform: Secure boot, signed firmware images, hardware-rooted key storage (a secure-element companion or equivalent), verified OTA.
• A time-boxed feasibility study on cloud protocol: We need to know whether MQTT-over-TLS with mutual auth fits on the existing MCU: footprint, RAM/flash budget, TLS-stack viability. Your finding drives the platform’s edge-protocol decision.
• The field-side protocol layer: Modbus RTU primary, CAN bus where required. Clean driver abstraction so adding a new field protocol is additive rather than a fork.
• OTA strategy and safety: Bench validation, staged rollouts, rollback, recover. We engineer OTA carefully because a bricked device in a wastewater plant is a contractual problem, not just an inconvenience.
• Provisioning and identity: Per-device mutual-TLS credentials, secure key injection at manufacturing, key rotation.

The skills, education, and experience you need:

To succeed in this role, you must have experience with:

• Reading Modbus RTU timing diagrams on an oscilloscope
• Debugging a stuck mutual-TLS handshake on a constrained MCU
• Pulling a bricked unit back over JTAG
• NXP toolchains (hands-on) or equivalent vendor environments
• Production work on secure boot chains, signed firmware, and verified OTA on resource-constrained devices
• Integrating hardware secure elements (Microchip ATECC608, Infineon OPTIGA Trust, or similar)
• TLS/MQTT on constrained MCUs: mbedTLS, WolfSSL, or comparable
• Modbus RTU on bare metal: RS-485 driver, interrupt timing, framing
• Working at the bench: oscilloscope, logic analyzer, JTAG/SWD debug, signal-level diagnosis
• Embedded firmware (7+ years), fluency in C and modern C++ on ARM Cortex-M class microcontrollers

Bonus qualifications:

• CAN bus on bare metal
• Industrial cert experience (FCC, CE, UL)
• Manufacturing text fixture or test program design
• Industrial or critical-infrastructure deployment experience
• Yocto, Buildroot, or other embedded-Linux exposure

A 4-year degree in Computer Engineering, Computer Science, Electrical Engineering or equivalent degree and 7-10 years of experience are required.

Compensation:

$150,000 per year