<p style="text-align:left;"><b>Job Description:</b></p><p style="text-align:inherit;"></p><p style="text-align:inherit;"></p><h2>Description</h2><br><p>Nextracker's Product Engineering organization is building the next generation of intelligent Edge Computing platforms that power our products deployed worldwide.</p><br><p>We are seeking an experienced <b>Senior Product Cybersecurity Engineer – Edge &amp; IoT</b> to lead the design and implementation of the cybersecurity architecture for our next-generation Edge-to-Cloud platform.</p><br><p>In this highly technical, hands-on role, you will architect, prototype and validate modern cybersecurity solutions for industrial IoT products, spanning embedded devices, Edge servers, cloud services and software development processes. You will design secure-by-design architecture using industry best practices including PKI, mTLS, TPM, secure boot, secrets management, software supply chain security and Zero Trust principles.</p><br><p>Working closely with Platform Engineering, DevOps, Embedded Software and Cloud Engineering, you will develop proof-of-concepts, define engineering standards and guide implementation of cybersecurity capabilities across the product portfolio while supporting compliance with regulations such as the EU Cyber Resilience Act (CRA), NERC CIP and other industrial cybersecurity requirements.</p><br><p>This position requires strong architectural thinking combined with the ability to implement, validate and troubleshoot complex cybersecurity solutions.</p><br><h2>Key Job Responsibilities</h2><br><ul><li>Design and implement Secure-by-Design cybersecurity architectures for Edge-to-Cloud products.</li><li>Develop proof-of-concepts validating new cybersecurity technologies and architectural decisions.</li><li>Design PKI, Certificate Authority (CA) and mutual TLS (mTLS) architectures supporting both cloud-connected and offline customer environments.</li><li>Architect secure authentication and authorization solutions for devices, cloud services, developers, field support, customers and auditors.</li><li>Design hardware-based security solutions using TPM, Secure Boot, encryption at rest and secure key management.</li><li>Define local and cloud secrets management architectures, including Vault technologies and certificate lifecycle management.</li><li>Collaborate with Platform and DevOps teams to integrate security into infrastructure, CI/CD pipelines and software delivery processes (DevSecOps).</li><li>Improve cybersecurity of existing products, including SSH hardening, secure communications, Zigbee security and migration from legacy key management.</li><li>Define and execute cybersecurity validation activities including threat modeling, penetration testing, vulnerability assessments and security architecture reviews.</li><li>Define software supply chain security practices including SBOM generation, artifact signing and vulnerability management.</li><li>Support compliance with industry cybersecurity regulations and produce security documentation, vulnerability reports and engineering standards.</li></ul><br><h2>Basic Qualifications</h2><br><ul><li><b>Education</b>: Bachelor’s degree in Computer Science, Electrical Engineering, or related field.</li><li><b>Experience</b>:<ul><li>8+ years designing and implementing cybersecurity solutions for software products.</li><li>Experience securing Linux, embedded systems and Industrial IoT platforms.</li><li>Experience implementing product security architectures from concept through deployment.</li></ul></li><li><b>Technical Knowledge</b>:<ul><li>PKI, X.509 Certificates, Certificate Authorities and mTLS</li><li>TPM 2.0, Secure Boot and Hardware Root of Trust</li><li>Ubuntu Linux, Yocto Linux and embedded operating systems</li><li>Authentication, authorization and secrets management (Vault)</li><li>Cryptography, encryption at rest and encryption in transit</li><li>Secure SDLC, Threat Modeling, OWASP and penetration testing</li><li>Software Supply Chain Security, SBOM, vulnerability management and DevSecOps</li><li>Security fundamentals for Docker, Kubernetes and cloud platforms</li></ul></li><li><b>Communication</b>: Excellent written and verbal communication; ability to collaborate across globally distributed teams.</li><li><b>Languages</b>: Fluency in English.</li></ul><br><h2>Preferred Qualifications</h2><br><ul><li><b>Education</b>: Master's degree in Cybersecurity, Computer Science or related field.</li><li><b>Experience</b>:<ul><li>Industrial IoT or Edge Computing platforms.</li><li>Critical Infrastructure or Operational Technology (OT) environments.</li><li>Embedded device security for Linux, ThreadX or bare-metal systems.</li></ul></li><li><b>Technical Knowledge</b>:<ul><li>IEC 62443, NERC CIP and EU Cyber Resilience Act (CRA)</li><li>HashiCorp Vault or equivalent secrets management platforms</li><li>Azure or AWS security services</li><li>GitHub Advanced Security, Sigstore, SLSA or similar secure software supply chain technologies</li></ul></li><li><b>Additional Experience</b><ul><li>Jira and Confluence.</li><li>Experience collaborating with Platform Engineering and DevOps teams to build secure products.</li></ul></li></ul><p><span style="color:#000000;"><span style="font-size:14px;">At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.</span></span></p><p></p><p></p><h1><span style="color:#a33600;"><b>We are Nextpower</b></span></h1><p></p>

<div class="org-about-module__description">
<div id="ember56" class="ember-view organization-about-module__content-consistant-cards-description"><span class="lt-line-clamp__raw-line">Since day one, Nextracker&rsquo;s mission has been to transition the world to affordable, renewable power, by developing the highest-performing and resilient solar tracking technologies and software in the market for our customers. From sustainable tracker solutions that conform to uneven terrain and withstand extreme weather, Nextracker systems have resilience built in. Nextracker leads the solar industry with solar tracker technologies that optimize and increase energy production while reducing costs for significant plant ROI.</span></div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

Senior Product Cybersecurity Engineer – Edge & IoT – R&D

<p><b>Job Description:</b></p><p></p><p></p><h2>Description</h2><br /><p>Nextracker's Product Engineering organization is building the next generation of intelligent Edge Computing platforms that power our products deployed worldwide.</p><br /><p>We are seeking an experienced <b>Senior Product Cybersecurity Engineer – Edge &amp; IoT</b> to lead the design and implementation of the cybersecurity architecture for our next-generation Edge-to-Cloud platform.</p><br /><p>In this highly technical, hands-on role, you will architect, prototype and validate modern cybersecurity solutions for industrial IoT products, spanning embedded devices, Edge servers, cloud services and software development processes. You will design secure-by-design architecture using industry best practices including PKI, mTLS, TPM, secure boot, secrets management, software supply chain security and Zero Trust principles.</p><br /><p>Working closely with Platform Engineering, DevOps, Embedded Software and Cloud Engineering, you will develop proof-of-concepts, define engineering standards and guide implementation of cybersecurity capabilities across the product portfolio while supporting compliance with regulations such as the EU Cyber Resilience Act (CRA), NERC CIP and other industrial cybersecurity requirements.</p><br /><p>This position requires strong architectural thinking combined with the ability to implement, validate and troubleshoot complex cybersecurity solutions.</p><br /><h2>Key Job Responsibilities</h2><br /><ul><li>Design and implement Secure-by-Design cybersecurity architectures for Edge-to-Cloud products.</li><li>Develop proof-of-concepts validating new cybersecurity technologies and architectural decisions.</li><li>Design PKI, Certificate Authority (CA) and mutual TLS (mTLS) architectures supporting both cloud-connected and offline customer environments.</li><li>Architect secure authentication and authorization solutions for devices, cloud services, developers, field support, customers and auditors.</li><li>Design hardware-based security solutions using TPM, Secure Boot, encryption at rest and secure key management.</li><li>Define local and cloud secrets management architectures, including Vault technologies and certificate lifecycle management.</li><li>Collaborate with Platform and DevOps teams to integrate security into infrastructure, CI/CD pipelines and software delivery processes (DevSecOps).</li><li>Improve cybersecurity of existing products, including SSH hardening, secure communications, Zigbee security and migration from legacy key management.</li><li>Define and execute cybersecurity validation activities including threat modeling, penetration testing, vulnerability assessments and security architecture reviews.</li><li>Define software supply chain security practices including SBOM generation, artifact signing and vulnerability management.</li><li>Support compliance with industry cybersecurity regulations and produce security documentation, vulnerability reports and engineering standards.</li></ul><br /><h2>Basic Qualifications</h2><br /><ul><li><b>Education</b>: Bachelor’s degree in Computer Science, Electrical Engineering, or related field.</li><li><b>Experience</b>:<ul><li>8+ years designing and implementing cybersecurity solutions for software products.</li><li>Experience securing Linux, embedded systems and Industrial IoT platforms.</li><li>Experience implementing product security architectures from concept through deployment.</li></ul></li><li><b>Technical Knowledge</b>:<ul><li>PKI, X.509 Certificates, Certificate Authorities and mTLS</li><li>TPM 2.0, Secure Boot and Hardware Root of Trust</li><li>Ubuntu Linux, Yocto Linux and embedded operating systems</li><li>Authentication, authorization and secrets management (Vault)</li><li>Cryptography, encryption at rest and encryption in transit</li><li>Secure SDLC, Threat Modeling, OWASP and penetration testing</li><li>Software Supply Chain Security, SBOM, vulnerability management and DevSecOps</li><li>Security fundamentals for Docker, Kubernetes and cloud platforms</li></ul></li><li><b>Communication</b>: Excellent written and verbal communication; ability to collaborate across globally distributed teams.</li><li><b>Languages</b>: Fluency in English.</li></ul><br /><h2>Preferred Qualifications</h2><br /><ul><li><b>Education</b>: Master's degree in Cybersecurity, Computer Science or related field.</li><li><b>Experience</b>:<ul><li>Industrial IoT or Edge Computing platforms.</li><li>Critical Infrastructure or Operational Technology (OT) environments.</li><li>Embedded device security for Linux, ThreadX or bare-metal systems.</li></ul></li><li><b>Technical Knowledge</b>:<ul><li>IEC 62443, NERC CIP and EU Cyber Resilience Act (CRA)</li><li>HashiCorp Vault or equivalent secrets management platforms</li><li>Azure or AWS security services</li><li>GitHub Advanced Security, Sigstore, SLSA or similar secure software supply chain technologies</li></ul></li><li><b>Additional Experience</b><ul><li>Jira and Confluence.</li><li>Experience collaborating with Platform Engineering and DevOps teams to build secure products.</li></ul></li></ul><p><span><span>At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.</span></span></p><p></p><p></p><h1><span><b>We are Nextpower</b></span></h1><p></p>

Senior Product Cybersecurity Engineer – Edge & IoT – R&D

About the Job

About the Company

Nextracker Solar

Similar Jobs

Senior Staff Engineer, Security Architect

Senior Staff Engineer, Security Architect

Staff Network Security Architect

Staff Network Security Architect

Senior Network Security Engineer

Senior Network Security Engineer

Staff Cloud Security Engineer

Staff Cloud Security Engineer

Senior Software Systems Engineer - Security

Senior Software Systems Engineer - Security

DevSecOps Engineer-Experienced

DevSecOps Engineer-Experienced

Senior Network Security Engineer

Senior Network Security Engineer

Senior Security Engineer

Senior Security Engineer

Staff Software Engineer, Cybersecurity

Staff Software Engineer, Cybersecurity

Principal Software Engineer, Cybersecurity

Principal Software Engineer, Cybersecurity