Senior Third Party Firmware Program Manager

Senior Third Party Firmware Program Manager

This role has been designed as 'Hybrid' with a requirement that you will work on average 2 days per week from an HPE office.

Who We Are:

Hewlett Packard Enterprise is the global edge-to-cloud company advancing the way people live and work.

We help companies connect, protect, analyze, and act on their data and applications wherever they live, from edge to cloud, so they can turn insights into outcomes at the speed required to thrive in today's complex world.

Our culture thrives on finding new and better ways to accelerate what's next.

We know varied backgrounds are valued and succeed here.

We have the flexibility to manage our work and personal needs.

We make bold moves, together, and are a force for good.

If you are looking to stretch and grow your career our culture will embrace you.

Open up opportunities with HPE.

Job Description:

We are seeking a Senior Program Manager to establish and lead HPE's cross-functional program for governing third-party firmware incorporated into HPE products and solutions.

This leader will build the operating model required to ensure supplier-developed firmware is identifiable, secure, supportable, traceable, and managed throughout its lifecycle, from product and supplier selection through deployment, vulnerability management, sustaining, and end of support.

The role spans a broad ecosystem of third-party technologies, including power and cooling infrastructure, CDUs, RDHXs, ARCS/MCS, PDUs, power shelves, inverters, SSDs, memory, and other supplier-provided devices containing field-upgradable firmware.

Responsibilities:

Establish governance and ownership: Define the enterprise operating model, RACI, decision rights, and escalation paths across Firmware and Hardware Engineering, Product Security, Supply Chain, Procurement, Quality, Services, Product Management, and suppliers.

Build an end-to-end firmware lifecycle: Establish repeatable processes covering supplier qualification, firmware and security assessment, product qualification, release, deployment, updates, vulnerability response, sustaining, and end of support.

Strengthen cybersecurity and compliance: Partner with Product Security and suppliers to establish requirements for secure firmware, vulnerability management, SBOMs, firmware signing and provenance, secure development, supply-chain cybersecurity, and applicable regulatory requirements.

Drive supplier accountability: Work with Procurement and Supply Chain to establish clear contractual expectations for firmware quality, availability, security updates, vulnerability remediation, support duration, incident response, and end-of-life notification.

Define HPE versus supplier responsibility: Establish decision criteria for HPE-branded versus supplier-branded products and ensure firmware ownership and lifecycle obligations are explicitly understood before products are introduced.

Enable customer and service support: Ensure Services, field teams, and cu...