Senior Embedded Security Architect (80-100%)

Belimo Automation Ag
Hinwil, Switzerland
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

Hinwil, Switzerland

Tech stack

Cloud Computing
Code Review
Computer Security
Firmware
Open Web Application Security
Public Key Infrastructure
Software Vulnerability Management
Cloud Platform System
Information Technology

Job description

As Security Architect at Belimo, you will take ownership of our security architecture across devices, applications, and cloud platforms. In this strategic role, you'll define and implement robust security requirements and controls, supporting the entire development lifecycle. Collaborating with cross-functional teams, you'll embed modern security principles into our systems while ensuring compliance with relevant standards. This position is ideal for someone with deep technical expertise and a practical mindset who thrives in a fast-evolving technology landscape.

What You'll Do

Define and own the security architecture across device, application, and cloud environments

Design and oversee key and credential management systems, including PKI and certificate lifecycle management

Develop and evolve SSDLC practices, threat modeling, vulnerability management, and security testing

Specify embedded security mechanisms such as ARM TrustZone, secure boot, and firmware update integrity

Collaborate with architects across Embedded, Applications, and Cloud to integrate security principles like least privilege and security-by-design

Maintain architectural security documentation, compliance records, and training programs

Lead design and code reviews focused on security and privacy

Requirements

Do you have a Master's degree?, BSc or MSc in Computer Science, Information Security, or a related field; relevant certifications such as CISSP or CSSLP are a plus

Several years of experience in security architecture for embedded and optionally cloud systems

Strong hands-on knowledge in PKI, cryptography, ARM TrustZone/TF-M, secure boot, and SSDLC practices

Familiarity with standards and frameworks such as OWASP, ISO 27001, IEC 62443, and NIST

Skilled in security tooling and incident response

High integrity, strong risk-awareness, and ability to communicate and coach across teams

Calm and methodical during high-pressure security incidents

About the company

At Belimo, we take pride in making our company a rewarding place to work. Our leaders are value-driven and encourage new ideas in their teams around the world. Through our passion, our employees are not only creating amazing products, they are revolutionizing the HVAC industry. Investing in our people is at the heart of Belimo's approach to engaging diverse creative talent to grow an industry-leading company. The success of our corporate brand is based on the expertise and commitment of each individual.

Apply for this position