Job Description:
Description
Nextracker's Product Engineering organization is building the next generation of intelligent Edge Computing platforms that power our products deployed worldwide.
We are seeking an experienced Senior Product Cybersecurity Engineer – Edge & IoT to lead the design and implementation of the cybersecurity architecture for our next-generation Edge-to-Cloud platform.
In this highly technical, hands-on role, you will architect, prototype and validate modern cybersecurity solutions for industrial IoT products, spanning embedded devices, Edge servers, cloud services and software development processes. You will design secure-by-design architecture using industry best practices including PKI, mTLS, TPM, secure boot, secrets management, software supply chain security and Zero Trust principles.
Working closely with Platform Engineering, DevOps, Embedded Software and Cloud Engineering, you will develop proof-of-concepts, define engineering standards and guide implementation of cybersecurity capabilities across the product portfolio while supporting compliance with regulations such as the EU Cyber Resilience Act (CRA), NERC CIP and other industrial cybersecurity requirements.
This position requires strong architectural thinking combined with the ability to implement, validate and troubleshoot complex cybersecurity solutions.
Key Job Responsibilities
- Design and implement Secure-by-Design cybersecurity architectures for Edge-to-Cloud products.
- Develop proof-of-concepts validating new cybersecurity technologies and architectural decisions.
- Design PKI, Certificate Authority (CA) and mutual TLS (mTLS) architectures supporting both cloud-connected and offline customer environments.
- Architect secure authentication and authorization solutions for devices, cloud services, developers, field support, customers and auditors.
- Design hardware-based security solutions using TPM, Secure Boot, encryption at rest and secure key management.
- Define local and cloud secrets management architectures, including Vault technologies and certificate lifecycle management.
- Collaborate with Platform and DevOps teams to integrate security into infrastructure, CI/CD pipelines and software delivery processes (DevSecOps).
- Improve cybersecurity of existing products, including SSH hardening, secure communications, Zigbee security and migration from legacy key management.
- Define and execute cybersecurity validation activities including threat modeling, penetration testing, vulnerability assessments and security architecture reviews.
- Define software supply chain security practices including SBOM generation, artifact signing and vulnerability management.
- Support compliance with industry cybersecurity regulations and produce security documentation, vulnerability reports and engineering standards.
Basic Qualifications
- Education: Bachelor’s degree in Computer Science, Electrical Engineering, or related field.
- Experience:
- 8+ years designing and implementing cybersecurity solutions for software products.
- Experience securing Linux, embedded systems and Industrial IoT platforms.
- Experience implementing product security architectures from concept through deployment.
- Technical Knowledge:
- PKI, X.509 Certificates, Certificate Authorities and mTLS
- TPM 2.0, Secure Boot and Hardware Root of Trust
- Ubuntu Linux, Yocto Linux and embedded operating systems
- Authentication, authorization and secrets management (Vault)
- Cryptography, encryption at rest and encryption in transit
- Secure SDLC, Threat Modeling, OWASP and penetration testing
- Software Supply Chain Security, SBOM, vulnerability management and DevSecOps
- Security fundamentals for Docker, Kubernetes and cloud platforms
- Communication: Excellent written and verbal communication; ability to collaborate across globally distributed teams.
- Languages: Fluency in English.
Preferred Qualifications
- Education: Master's degree in Cybersecurity, Computer Science or related field.
- Experience:
- Industrial IoT or Edge Computing platforms.
- Critical Infrastructure or Operational Technology (OT) environments.
- Embedded device security for Linux, ThreadX or bare-metal systems.
- Technical Knowledge:
- IEC 62443, NERC CIP and EU Cyber Resilience Act (CRA)
- HashiCorp Vault or equivalent secrets management platforms
- Azure or AWS security services
- GitHub Advanced Security, Sigstore, SLSA or similar secure software supply chain technologies
- Additional Experience
- Jira and Confluence.
- Experience collaborating with Platform Engineering and DevOps teams to build secure products.
At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.
**We are Nextpower**