Embedded Engineer- US Site

You'll own firmware end-to-end on safety-critical embedded systems. Our products run on ARM Cortex-M class hardware in demanding field environments. The current codebase is Rust-on-Embassy, but we are language-agnostic — strong C, C++, or Rust embedded engineers are equally welcome. You'll work closely with the hardware engineer from bring-up through qualification.

What you'll do:

• Own firmware end-to-end: drivers, state machines, communication protocols, command surface, bring-up, qualification, and programming flows.
• Build and maintain a host-testable simulation layer — the state machine should be testable on a laptop without flashing a board, and stay that way.
• Work shoulder-to-shoulder with the HW engineer on bring-up, register-map ergonomics, and timing decisions.
• Carry firmware through environmental qualification (thermal, EMC, vibration) — you'll be on the bench when something is acting wrong at -20°C.
• Define and enforce the firmware-side safety case: what we test, what we prove, what is allowed to ship.
• Write code that is terse, testable, and obvious about its safety story.

Required:

• 7+ years of professional embedded firmware on ARM Cortex-M (or comparable) in C, C++, or Rust — show us something you shipped or fielded.
• Deep comfort with the bare-metal stack: interrupts, DMA, clocks, timers, low-power modes, linker scripts, and memory maps.
• Strong with peripheral protocols — I²C, SPI, UART, USB CDC — and with debugging them on a scope or logic analyzer when the abstraction layer is lying.
• Experience building and reasoning about real-world safety-relevant state machines, including guard conditions and timer-driven transitions.
• Discipline around testability: pure-logic code separated from HAL, host tests for everything that doesn't strictly need the target.
• Working English, written and verbal.

Nice to have:

• Rust embedded experience — Embassy, embedded-hal, defmt, probe-rs, RTIC, no_std ecosystem.
• Modern C++ embedded (C++17/20, freestanding builds).
• Safety-critical firmware background: defense (MIL-STD-882), automotive (ISO 26262/MISRA), aerospace (DO-178C), or medical (IEC 62304).
• Async firmware experience (Embassy, Zephyr, FreeRTOS with event loops, or bare-metal cooperative schedulers).
• Bootloader, DFU, and secure-boot work; factory provisioning and programming flows.
• Experience shipping a C SDK or FFI bindings to external integrators.

How we work: Small team, weekly hardware iterations, real boards on every desk. You'll have a bench, a stack of dev kits, and a direct line to the HW and mechanical engineers. We expect you to defend your timing assumptions — and to be in the room when the next board spin is decided.