Windchill Security Architect

Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business.

Our people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow - all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible.

Role and Job Description for Security Architect :-

We are seeking a highly experienced Security Architect with 15+ years of expertise in secure software development, application security, and enterprise security architecture. The successful candidate will serve as a trusted advisor to engineering leadership and business stakeholders, providing strategic guidance on security initiatives and best practices.

The ideal candidate will possess deep expertise in software development and application security, with a strong focus on designing, developing, and implementing scalable security solutions that enhance the security posture of applications and platforms.

This role is responsible for identifying and driving scalable product security solutions to address application security risks. The candidate will work closely with Product Management, Development, and Application Security teams to identify security gaps, define remediation strategies, Identify and Develop practical and reusable security solutions with hands on working that can be adopted across engineering organizations.

Key Responsibilities

-Serve as a trusted advisor and subject matter expert with deep hands-on experience in Java, Spring Boot, Microservices, Cloud-Native Architectures, Application Security, Container Security, Identity & Access Management (IAM), and Secure Software Development.

-Analyse and assess security issues identified through threat modelling, security architecture reviews, secure development pattern assessments, security scanning tools, and customer-reported cases, and evaluate their security impact/ Risk on application security.

-Collaborate closely with Product Management, Development, Application Security, and Platform Engineering teams to design and deliver effective solutions with actual hands on, including reusable security frameworks, reference architectures, and remediation guidance that can be leveraged across engineering organizations.

-Drive the adoption of security best practices and secure design patterns across products and platforms to strengthen the overall security posture.

-Leverage 15+ years of hands-on software development experience, with deep expertise in Java and enterprise application development, to design and deliver large-scale, mission-critical software solutions.

-Act as a Subject Matter Expert (SME) in modern application development and architecture, with extensive experience in Java, Spring Boot, Microservices, REST APIs, Distributed Systems, and Cloud-Native technologies.

-Apply strong software engineering fundamentals, including object-oriented design, software architecture, design patterns, secure coding practices, and modern development frameworks such as .NET, Python, JavaScript, React, Angular, and Node.js.

Your Team

You will be part of the PLM R&D - Platform organization.

Must-Have Skills

- 15+ years of hands-on experience in application development and architecture, with deep expertise in Java, Spring Boot, Microservices, REST APIs, Distributed Systems, and Cloud-Native technologies.

- Application Security & Cloud Security: Strong understanding of Application Security standards and frameworks, Secure SDLC, OWASP Top 10, OWASP ASVS, Secure Coding Practices, Threat Modeling, Secure Design Reviews, Vulnerability Management, API Security, Penetration Testing, and security testing methodologies including SAST, DAST, IAST, and SCA.

- Identity & Access Management (IAM): OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, Active Directory, Microsoft Entra ID (Azure AD), and Privileged Access Management (PAM).

- Strong hands-on experience in designing, developing, and implementing scalable security architectures, frameworks, and reusable security solutions across enterprise applications, platforms, and cloud-native environments

Required Qualifications

Education

- Bachelors or Masters degree in Computer Science, Information Security, Engineering, or a related discipline.

We respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here ."