Enphase Energy is a global energy technology company and a leading provider of solar, battery, and electric vehicle charging products. Founded in 2006, our innovative microinverter technology revolutionized solar power, making it a safer, more reliable, and scalable energy source. Today, the Enphase Energy System enables users to make, use, save, and sell their own power. Enphase is also one of the most successful and innovative clean energy companies in the world, with more than 80 million products shipped across 160 countries.
Join our dynamic teams designing and developing next-gen energy technologies and help drive a sustainable future!
This role at Enphase requires working onsite 3 days a week, with plans to transition back to a full 5 day in office schedule over time.
About the Role
Join Enphase Energy as a Security Engineer, Embedded and help secure the IQ Gateway and IQ Microinverter platforms, ARM-based IoT devices that connect millions of solar homes worldwide through Wi-Fi, Ethernet, and cellular networks.
In this role, you will work closely with firmware, cloud, hardware, and product teams to implement security features across embedded systems and contribute to building highly secure and scalable energy solutions. You will help develop and enhance secure boot mechanisms, device identity and provisioning, secure communications, OTA security, and device hardening across the Enphase embedded product portfolio.
What You Will Be Doing
- Develop and maintain secure boot mechanisms, chain-of-trust implementations, and secure provisioning processes for embedded devices.
- Implement and support hardware Root-of-Trust solutions, secure key storage, and device identity management.
- Design and maintain secure communication frameworks using TLS/mTLS, PKI, and certificate-based authentication.
- Support secure OTA update mechanisms, including signed firmware updates, integrity verification, rollback protection, and recovery features.
- Participate in threat modeling, security reviews, and risk assessments for embedded and IoT products.
- Collaborate with firmware, hardware, cloud, and security teams to integrate security-by-design principles into product development.
- Implement security controls for device-to-cloud communication and fleet management platforms.
- Contribute to securing IoT communication interfaces including BLE, Wi-Fi (802.11), Ethernet, and PLC/powerline communication.
- Perform security testing, vulnerability analysis, and remediation activities for embedded systems.
- Stay current with emerging embedded and IoT security threats, technologies, and industry standards.
Who You Are and What You Bring
- BE/BTech/MS/MTech in Computer Science, Electrical Engineering, Electronics, or related field.
- 4+ years of experience in embedded systems security, product security, firmware security, or IoT security.
- Hands-on experience with secure boot, chain-of-trust concepts, Trusted Execution Environments (TEE), and ARM TrustZone.
- Experience with cryptographic technologies including AES, RSA, ECC, secure key management, and secure storage.
- Knowledge of TLS/mTLS, PKI, certificate management, and secure communication protocols.
- Experience working with embedded Linux and/or RTOS-based platforms.
- Programming experience in C/C++ with embedded device development.
- Familiarity with security testing, threat modeling methodologies (STRIDE preferred), and vulnerability assessment techniques.
- Understanding of IoT networking technologies including BLE, Wi-Fi, Ethernet, and cellular connectivity.
- Strong problem-solving skills and ability to work effectively in cross-functional teams.
Nice to Have
- Experience with HSMs, TPMs, secure elements, or hardware security features.
- Exposure to OTA firmware update frameworks and firmware signing processes.
- Familiarity with security standards such as IEC 62443, ETSI EN 303 645, or NIST IoT guidance.
- Experience with cloud-connected IoT products and device lifecycle management.
What We Offer
- Competitive compensation and comprehensive employee benefits.
- Opportunity to work on security for large-scale global IoT energy systems.
- Exposure to cutting-edge embedded and IoT security technologies.
- Collaborative, innovation-driven work environment.
- Career growth and development opportunities.
Skills Required
- Bachelor’s or master’s degree in Computer Science, Electrical Engineering, Electronics, or a related field
- 4 or more years of experience in embedded systems security, product security, firmware security, or IoT security
- Hands-on experience with secure boot, chain of trust, Trusted Execution Environments, and ARM TrustZone
- Experience with AES, RSA, ECC, secure key management, and secure storage
- Knowledge of TLS, mTLS, PKI, certificate management, and secure communication protocols
- Experience with embedded Linux or RTOS-based platforms
- Programming experience in C or C++ with embedded device development
- Familiarity with security testing, threat modeling, and vulnerability assessment techniques
- Understanding of BLE, Wi-Fi, Ethernet, and cellular IoT networking technologies
- Strong problem-solving and cross-functional collaboration skills
- Experience with HSMs, TPMs, secure elements, or hardware security features
- Exposure to OTA firmware update frameworks and firmware signing processes
- Familiarity with IEC 62443, ETSI EN 303 645, or NIST IoT guidance
- Experience with cloud-connected IoT products and device lifecycle management
What We Do
Enphase Energy is a global energy technology company and the world’s leading supplier of microinverter-based solar and battery systems. We are advancing a sustainable future for all!
