PTC—Windchill Security Architect

Job description

Description: Our world is transforming, and PTC is leading the way. Our software brings the physical and digital worlds together, enabling companies to improve operations, create better products, and empower people in all aspects of their business. Our people make all the difference in our success. Today, we are a global team of nearly 7,000 and our main objective is to create opportunities for our team members to explore, learn, and grow – all while seeing their ideas come to life and celebrating the differences that make us who we are and the work we do possible. Role and Job Description for Security Architect :- We are seeking a highly experienced Security Architect with 15+ years of expertise in secure software development, application security, and enterprise security architecture. The successful candidate will serve as a trusted advisor to engineering leadership and business stakeholders, providing strategic guidance on security initiatives and best practices. The ideal candidate will possess deep expertise in software development and application security, with a strong focus on designing, developing, and implementing scalable security solutions that enhance the security posture of applications and platforms. This role is responsible for identifying and driving scalable product security solutions to address application security risks. The candidate will work closely with Product Management, Development, and Application Security teams to identify security gaps, define remediation strategies, Identify and Develop practical and reusable security solutions with hands on working that can be adopted across engineering organizations. Key Responsibilities •Serve as a trusted advisor and subject matter expert with deep hands-on experience in Java, Spring Boot, Microservices, Cloud-Native Architectures, Application Security, Container Security, Identity & Access Management (IAM), and Secure Software Development. •Analyse and assess security issues identified through threat modelling, security architecture reviews, secure development pattern assessments, security scanning tools, and customer-reported cases, and evaluate their security impact/ Risk on application security. •Collaborate closely with Product Management, Development, Application Security, and Platform Engineering teams to design and deliver effective solutions with actual hands on, including reusable security frameworks, reference architectures, and remediation guidance that can be leveraged across engineering organizations. •Drive the adoption of security best practices and secure design patterns across products and platforms to strengthen the overall security posture. •Leverage 15+ years of hands-on software development experience, with deep expertise in Java and enterprise application development, to design and deliver large-scale, mission-critical software solutions. •Act as a Subject Matter Expert (SME) in modern application development and architecture, with extensive experience in Java, Spring Boot, Microservices, REST APIs, Distributed Systems, and Cloud-Native technologies. •Apply strong software engineering fundamentals, including object-oriented design, software architecture, design patterns, secure coding practices, and modern development frameworks such as .NET, Python, JavaScript, React, Angular, and Node.js. Your Team You will be part of the PLM R&D – Platform organization. Must-Have Skills • 15+ years of hands-on experience in application development and architecture, with deep expertise in Java, Spring Boot, Microservices, REST APIs, Distributed Systems, and Cloud-Native technologies. • Application Security & Cloud Security: Strong understanding of Application Security standards and frameworks, Secure SDLC, OWASP Top 10, OWASP ASVS, Secure Coding Practices, Threat Modeling, Secure Design Reviews, Vulnerability Management, API Security, Penetration Testing, and security testing methodologies including SAST, DAST, IAST, and SCA. • Identity & Access Management (IAM): OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, Active Directory, Microsoft Entra ID (Azure AD), and Privileged Access Management (PAM). • Strong hands-on experience in designing, developing, and implementing scalable security architectures, frameworks, and reusable security solutions across enterprise applications, platforms, and cloud-native environments Required Qualifications Education • Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or a related discipline. Life at PTC is about more than working with today’s most cutting-edge technologies to transform the physical world. It’s about showing up as you are and working alongside some of today’s most talented industry leaders to transform the world around you. If you share our passion for problem-solving through innovation, you’ll likely become just as passionate about the PTC experience as we are. Are you ready to explore your next career move with us? We respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here."