Firmware Architect/Product Security Technical Lead

TEKsystems•Richardson, TX

4d•$70 - $87•Onsite

About The Position

The Technical Lead - Firmware and Product Security (Level 5) is a senior, hands-on role responsible for the architecture, development, verification, and lifecycle security of embedded firmware for connected medical devices. The role establishes technical direction and owns the firmware and product-security roadmap for assigned platforms, ensuring solutions are secure, reliable, maintainable, and compliant with applicable regulatory standards from product concept through post-market support. The lead translates system, clinical, user, safety, privacy, and cybersecurity needs into firmware requirements and testable acceptance criteria. They guide architecture and implementation while working directly on design, coding, reviews, debugging, integration, verification, and risk resolution. The position collaborates across Systems, Hardware, Software, Quality, Regulatory, Information Security, Manufacturing, and Program Management, as well as with suppliers and development partners. It also mentors engineers and improves reusable platforms, processes, and organizational capabilities in secure product development.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Software Engineering, or a related discipline, or an equivalent combination of education and relevant experience.
Typically 15+ years of embedded software or firmware experience, including substantial responsibility for architecture and delivery of complex products in a regulated or high-reliability environment.
Advanced proficiency in C and C++, with strong knowledge of embedded systems, microcontrollers, RTOS concepts, memory and power constraints, hardware/software interfaces, debugging, and communication protocols.
Demonstrated experience leading firmware architecture and development from requirements through verification, release, maintenance, and end-of-life.
Practical knowledge of product-security engineering, including threat modeling, security risk management, vulnerability assessment, secure coding, cryptographic concepts, secure communications, and software-update security.
Experience operating within a quality management system and applying disciplined design controls, risk management, configuration management, traceability, verification, and technical documentation.
Working knowledge of medical-device software and cybersecurity expectations, including FDA guidance and relevant standards such as IEC 62304, ISO 14971, IEC 81001-5-1, and applicable quality-system requirements.
Ability to influence across functions, lead technical decision-making, manage ambiguity and risk, and communicate complex topics clearly to engineering and business stakeholders.
Strong problem-solving, mentoring, organizational, and written communication skills, with a proactive and hands-on leadership style.
Significant experience in firmware architecture, embedded C++, real-time operating systems (RTOS), threat modeling, medical-device software development, cybersecurity, secure boot, FDA regulations and IEC 62304, Bluetooth Low Energy (BLE), over-the-air (OTA) updates, and firmware over-the-air (FOTA) updates.
Strong embedded C/C++ development experience.
Experience in medical devices or another regulated industry.
Experience with sensor integration, driver development, and hardware interfacing.
Experience with communication protocols such as UART, SPI, and I2C.
Exposure to cloud platforms such as Microsoft Azure and/or AWS.
Experience with software testing, verification, and quality processes; knowledge of IEC 62304 and ISO 13485 standards.
US citizenship or Green Card holder.

Nice To Haves

Master's degree in Computer Science, Computer Engineering, Electrical Engineering, Software Engineering, Cybersecurity, or a related discipline.
Experience developing connected medical devices, digital-health products, portable or battery-powered systems, or cloud-connected embedded solutions.
Experience with embedded, wireless, or cellular connectivity, Bluetooth Low Energy, secure cloud/device integration, or over-the-air firmware updates.
Experience with penetration testing, fuzz testing, vulnerability management, SBOM tools, open-source software governance, or incident-response processes.
Familiarity with standards and frameworks such as UL 2900, NIST Cybersecurity Framework, NIST Secure Software Development Framework, or equivalent secure-development practices.
Experience leading suppliers or geographically distributed engineering teams and delivering multiple products or platform releases.
Relevant technical or cybersecurity certification.

Responsibilities

Own the technical vision and roadmap for embedded firmware and product security across assigned connected medical-device platforms.
Lead firmware architecture, requirements decomposition, interface definition, design reviews, implementation, integration, verification, and release readiness for safety- and business-critical features.
Establish secure-by-design firmware practices, including threat modeling, security risk assessment, attack-surface analysis, secure boot, authentication, cryptography, key management, access control, secure communications, logging, and secure update mechanisms.
Translate system, clinical, user, safety, privacy, and cybersecurity needs into clear firmware requirements and testable acceptance criteria with bidirectional traceability.
Provide hands-on technical leadership in C/C++, RTOS-based systems, device drivers, board bring-up, bootloaders, communication protocols, connectivity, diagnostics, and performance optimization.
Drive disciplined engineering practices, including coding standards, peer reviews, static and dynamic analysis, unit and integration testing, automated builds, CI/CD, configuration management, and defect prevention.
Lead technical investigations and root-cause analysis for complex firmware, hardware-interface, connectivity, performance, reliability, and security issues; ensure effective corrective and preventive actions.
Partner with Quality and Regulatory teams to produce and maintain design history, software lifecycle, cybersecurity, risk-management, verification, and submission documentation consistent with applicable medical-device requirements.
Support product-security activities throughout the lifecycle, including vulnerability monitoring, coordinated vulnerability response, third-party component assessment, software bill of materials governance, security testing, and post-market remediation.
Evaluate technical tradeoffs involving safety, security, performance, power, memory, cost, schedule, manufacturability, serviceability, and long-term maintainability; communicate recommendations and business impact to stakeholders.
Coordinate with internal teams, suppliers, and development partners to define deliverables, review designs, manage technical risks, and ensure adherence to architecture, quality, and security expectations.
Mentor engineers, lead technical forums, improve reusable platforms and processes, and foster engineering rigor, accountability, collaboration, and continuous learning.