Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries. Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!This role at Enphase requires working onsite 3 days a week, with plans to transition back to a full 5 day in office schedule over time. About the role:Join Enphase Energy as an Embedded Security Architect and help secure the IQ Gateway and IQ Microinverter platforms—ARM-based IoT devices that connect millions of solar homes worldwide via Wi-Fi, Ethernet, and cellular networks with cloud-managed OTA firmware delivery. In this role, you will drive security-by-design across embedded systems, working closely with firmware, cloud, and product teams to build highly secure and scalable energy solutions.You will own critical security components such as secure boot chains, TrustZone partitioning, hardware Root-of-Trust, and cryptographic key provisioning across the fleet, ensuring robust, end-to-end device security. What you will be doing:<ul style="margin-top:0.0px;"><li>Architect secure boot chains with a hardware-anchored root of trust — signed, staged bootloaders, anti-rollback counters, and eFuse/OTP provisioning — using ARM TrustZone to isolate secure and non-secure worlds (TEE/OP-TEE)</li><li>Design hardware Root-of-Trust and device-identity provisioning (secure elements, PUF, eFuse) and manage the key lifecycle from manufacturing through rotation and revocation</li><li>Build and maintain mutual-TLS and PKI frameworks — per-device certificates, certificate lifecycle, and secure key storage for authenticated device-to-cloud communication</li><li>Design secure OTA update architectures: signed and encrypted images, A/B partitioning, anti-rollback, and fail-safe recovery for the embedded fleet</li><li>Lead threat modeling (STRIDE) and risk assessments, defining attack surfaces, abuse cases, and mitigations for large embedded fleets</li><li>Secure cloud-to-device trust across Enphase platforms (e.g., app and cloud ecosystems)</li><li>Drive security integration across firmware, hardware, and cloud teams</li><li>Harden IoT communication protocols across BLE, Wi-Fi (802.11), Ethernet, and PLC/powerline interfaces</li><li>Define and enforce security-by-design standards and lead security architecture reviews across the embedded fleet</li></ul>Who you are and what you bring:<ul style="margin-top:0.0px;"><li>BE/BTech/MS/MTech in Computer Science, Electrical Engineering, or a related field.</li><li>8+ years of experience in embedded security or IoT security architecture</li><li>Expertise in ARM TrustZone (TEE/OP-TEE), secure bootloaders, chain-of-trust, and hardware Root-of-Trust on ARM Cortex-A/M</li><li>Experience with HSM/TPM integration, secure elements, and cryptographic key management (AES, RSA, ECC, hardware crypto accelerators)</li><li>Strong knowledge of TLS/mTLS, PKI, certificate lifecycle management, and secure communication protocol design</li><li>Familiarity with IoT protocols: BLE, Wi-Fi (802.11), Ethernet, and PLC/powerline communication</li><li>Knowledge of security standards: IEC 62443, ETSI EN 303 645, EU Cyber Resilience Act</li><li>Experience embedding security-by-design in partnership with firmware, cloud, and product security teams</li><li>Familiarity with secure firmware signing and encrypted, authenticated OTA update delivery</li><li>Strong problem-solving skills with the ability to thrive in a fast-paced, cross-functional environment</li><li>Proficiency in C/C++ and embedded development on RTOS and embedded Linux for ARM Cortex-A/M targets</li></ul>Nice to have:<ul style="margin-top:0.0px;"><li>Experience designing secure OTA update pipelines for large device fleets</li><li>Familiarity with side-channel analysis and hardware fault-injection countermeasures</li><li>Relevant certifications such as CISSP-ISSAP, GPEN, or GXPN</li></ul>What we offer:<ul style="margin-top:0.0px;"><li>Competitive compensation and comprehensive employee benefits</li><li>Opportunity to architect security for large-scale global IoT energy systems</li><li>Exposure to cutting-edge technologies in embedded and IoT security</li><li>Collaborative and innovation-driven work environment</li><li>Career growth and development opportunities</li></ul>#ITSecurity

At Enphase, we think big. We’re on a mission to bring solar energy to the next level, one where it’s ready to meet the energy demands of an entire globe. As we work towards our vision for a solar-powered planet, we never lose sight of the three commitments that have guided us from the beginning: innovation, quality, and responsibility.
We’ve always pushed the boundaries of solar technology, ever since our founders took one look at a string inverter and knew they could do better. We’re still at it. We’re passionate about developing new technologies that make energy more intelligent, more connected, and more cost effective than ever before.

Mission
To deliver technology solutions that make clean energy affordable, reliable and accessible to all.

Values
We are experts in our discipline and love what we do
We are passionate about winning
We have high aspirations and set bold goals
We are enthusiastic about delivering the best customer experience
We are open, honest, transparent and respectful with our colleagues

Vision
The world's leading clean energy solution provider

We're changing energy. Come join us.

Embedded Security Architect

Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries. Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!This role at Enphase requires working onsite 3 days a week, with plans to transition back to a full 5 day in office schedule over time. About the role:Join Enphase Energy as an Embedded Security Architect and help secure the IQ Gateway and IQ Microinverter platforms—ARM-based IoT devices that connect millions of solar homes worldwide via Wi-Fi, Ethernet, and cellular networks with cloud-managed OTA firmware delivery. In this role, you will drive security-by-design across embedded systems, working closely with firmware, cloud, and product teams to build highly secure and scalable energy solutions.You will own critical security components such as secure boot chains, TrustZone partitioning, hardware Root-of-Trust, and cryptographic key provisioning across the fleet, ensuring robust, end-to-end device security. What you will be doing:<ul><li>Architect secure boot chains with a hardware-anchored root of trust — signed, staged bootloaders, anti-rollback counters, and eFuse/OTP provisioning — using ARM TrustZone to isolate secure and non-secure worlds (TEE/OP-TEE)</li><li>Design hardware Root-of-Trust and device-identity provisioning (secure elements, PUF, eFuse) and manage the key lifecycle from manufacturing through rotation and revocation</li><li>Build and maintain mutual-TLS and PKI frameworks — per-device certificates, certificate lifecycle, and secure key storage for authenticated device-to-cloud communication</li><li>Design secure OTA update architectures: signed and encrypted images, A/B partitioning, anti-rollback, and fail-safe recovery for the embedded fleet</li><li>Lead threat modeling (STRIDE) and risk assessments, defining attack surfaces, abuse cases, and mitigations for large embedded fleets</li><li>Secure cloud-to-device trust across Enphase platforms (e.g., app and cloud ecosystems)</li><li>Drive security integration across firmware, hardware, and cloud teams</li><li>Harden IoT communication protocols across BLE, Wi-Fi (802.11), Ethernet, and PLC/powerline interfaces</li><li>Define and enforce security-by-design standards and lead security architecture reviews across the embedded fleet</li></ul>Who you are and what you bring:<ul><li>BE/BTech/MS/MTech in Computer Science, Electrical Engineering, or a related field.</li><li>8+ years of experience in embedded security or IoT security architecture</li><li>Expertise in ARM TrustZone (TEE/OP-TEE), secure bootloaders, chain-of-trust, and hardware Root-of-Trust on ARM Cortex-A/M</li><li>Experience with HSM/TPM integration, secure elements, and cryptographic key management (AES, RSA, ECC, hardware crypto accelerators)</li><li>Strong knowledge of TLS/mTLS, PKI, certificate lifecycle management, and secure communication protocol design</li><li>Familiarity with IoT protocols: BLE, Wi-Fi (802.11), Ethernet, and PLC/powerline communication</li><li>Knowledge of security standards: IEC 62443, ETSI EN 303 645, EU Cyber Resilience Act</li><li>Experience embedding security-by-design in partnership with firmware, cloud, and product security teams</li><li>Familiarity with secure firmware signing and encrypted, authenticated OTA update delivery</li><li>Strong problem-solving skills with the ability to thrive in a fast-paced, cross-functional environment</li><li>Proficiency in C/C++ and embedded development on RTOS and embedded Linux for ARM Cortex-A/M targets</li></ul>Nice to have:<ul><li>Experience designing secure OTA update pipelines for large device fleets</li><li>Familiarity with side-channel analysis and hardware fault-injection countermeasures</li><li>Relevant certifications such as CISSP-ISSAP, GPEN, or GXPN</li></ul>What we offer:<ul><li>Competitive compensation and comprehensive employee benefits</li><li>Opportunity to architect security for large-scale global IoT energy systems</li><li>Exposure to cutting-edge technologies in embedded and IoT security</li><li>Collaborative and innovation-driven work environment</li><li>Career growth and development opportunities</li></ul>#ITSecurity

Embedded Security Architect

About the Job

About the Company

EnPhase Energy

Similar Jobs

(Senior) Embedded Linux Engineer (m/f/d)

(Senior) Embedded Linux Engineer (m/f/d)

Principal Cloud Security Architect

Principal Cloud Security Architect

Purple Teaming Engineer - Embedded Security

Purple Teaming Engineer - Embedded Security

IT/OT Security Engineer

IT/OT Security Engineer

OT Security Architect (all genders)

OT Security Architect (all genders)

Solution & Security Architect

Solution & Security Architect

Sr. Embedded Security Engineer

Sr. Embedded Security Engineer

Principal Engineer – Embedded Linux / Systems Architecture

Principal Engineer – Embedded Linux / Systems Architecture

Penetration Tester – IoT & Embedded Devices

Penetration Tester – IoT & Embedded Devices

Senior Staff Security Engineer

Senior Staff Security Engineer