Firmware Manager, CRA Compliance - Cargo (IoT)

Location: Palm Beach Gardens, Florida, USA. Authorization to work in the United States is required; visa sponsorship will not be provided.

Company

hirify.global develops climate technologies, HVACR systems, cold-chain solutions, and connected software and monitoring products.

What you will do

• Lead an embedded firmware engineering team building secure, scalable IoT products.
• Design and implement firmware security controls, including Hardware Root of Trust, Secure Boot, encrypted memory partitions, and secure key storage.
• Establish automated SBOM generation and dependency management using build pipelines and formats such as CycloneDX or SPDX.
• Direct secure, cryptographically signed OTA updates and rapid security patch deployment without bricking field devices.
• Implement vulnerability reporting, incident management, compliance testing, risk assessments, and CRA technical documentation.
• Collaborate with Product Management, Hardware Design, Legal/Compliance, Cloud IoT teams, auditors, and security researchers.

Requirements

• Bachelor’s or Master’s degree in Computer Engineering, Electrical Engineering, Computer Science, or equivalent practical experience.
• 8+ years of embedded firmware development experience with C/C++, RTOS, bare-metal, or Embedded Linux, preferably for IoT devices.
• 3+ years in engineering management, technical leadership, or a supervisory role.
• Hands-on experience with Secure Boot, HSM, TPM, Secure Elements, TLS/mTLS, memory protection, and secure storage.
• Knowledge of the EU Cyber Resilience Act, ETSI EN 303 645, NIST SP 800-213, IEC 62443, and related hardware/software security frameworks.
• Must be legally authorized to work in the United States; current or future sponsorship is not available.

Nice to have

• Experience with automated SBOM pipelines, vulnerability scanning, and CVE mapping.
• Experience with ARM Cortex-M/TrustZone, RISC-V, ESP32, BLE, Wi-Fi, Cellular IoT, Thread, or Matter.
• Knowledge of global IoT cybersecurity legislation, including the US Cyber Trust Mark and UK PSTI Act.
• Active CISSP, CSSLP, or CISM certification.

Culture & Benefits

• Work in a sustainability-focused climate technologies organization.
• Collaborative culture centered on passion, openness, inclusion, and belonging.
• Medical, dental, vision, and 401(k) benefits.
• Flexible time off, paid parental leave, vacation, and holiday leave.
• Professional development from onboarding through senior leadership.