NTT DATA—Technical Solution Architect - ThingWorx / SCPA

Job description

Description: Req ID: 388377 NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a Technical Solution Architect - ThingWorx / SCPA to join our team in Bangalore, Karnātaka (IN-KA), India (IN). Job Description – Technical Solution Architect – ThingWorx / SCPA Job Title: Technical Solution Architect – ThingWorx / SCPA Platform: ThingWorx 10.x Product Focus: Smart Connected Product Accelerator (SCPA) / SmartConnect Engagement Type: Solution Architecture, Design & Delivery Experience: 8+ Years overall, including 5+ years of ThingWorx experience Position Summary We are seeking an experienced Technical Solution Architect – ThingWorx / SCPA to lead the architecture and solution design of the next-generation SmartConnect connected-product platform using ThingWorx 10.x and Smart Connected Product Accelerator (SCPA). The architect will translate approved business requirements, user needs, and acceptance criteria into a secure, scalable, resilient, supportable, and maintainable technical solution. The role will provide technical direction across remote service access, endpoint automation, identity and access governance, enterprise integrations, master-data synchronization, and multiple user populations. The ideal candidate will bring deep hands-on expertise in ThingWorx architecture and development, combined with strong knowledge of SCPA building blocks, IoT solution architecture, security, identity management, enterprise integration, and remote-access solutions. A key objective of this role is to maximize the use of standard SCPA configuration and reusable building blocks, minimize unnecessary customization, and establish governed, upgrade-safe extension patterns where custom development is required. Key Responsibilities Solution Architecture & Technical Leadership - Own the end-to-end solution architecture for SmartConnect using ThingWorx 10.x and SCPA. - Define application, data, integration, security, deployment, infrastructure, and operational architecture. - Translate business requirements and Given/When/Then acceptance criteria into traceable technical requirements, architecture decisions, and implementation guidance. - Evaluate requirements against SCPA capabilities and determine the appropriate configure, integrate, extend, or custom-build approach. - Develop and maintain architecture diagrams, solution documentation, technical standards, and Architecture Decision Records (ADRs). - Establish implementation guardrails and reusable architectural patterns for development teams. ThingWorx & SCPA Architecture - Design the overall ThingWorx Thing model and asset hierarchy. - Define and govern: - Thing Templates - Thing Shapes - Data Shapes - Services - Events - Subscriptions - Persistence strategies - Mashups and application components - Assess and leverage SCPA standard capabilities, reusable building blocks, extension points, and custom components. - Ensure custom extensions are maintainable, testable, reusable, and designed to minimize future upgrade impact. Remote Access & Endpoint Management - Architect secure attended and unattended remote-access solutions for gateways and downstream endpoints. - Define architecture for session routing, customer/user consent, endpoint availability, failure handling, auditability, clipboard access, and file transfer. - Design secure gateway-to-endpoint communication and access patterns. - Ensure remote-access capabilities comply with enterprise cybersecurity and least-privilege requirements. Automation & Remote Package Execution - Design automated file-watch ingestion and processing capabilities. - Define targeted remote-package execution architecture, including: - Endpoint targeting - Integrity/checksum validation - Retry and failure-management policies - Execution status - Per-endpoint results - Audit records - Monitoring and observability - Establish scalable automation patterns for managing distributed endpoints and connected assets. Security, Identity & Access Governance - Define Role-Based Access Control (RBAC) and least-privilege security architecture. - Design static and dynamic visibility groups and segmented access models. - Architect Just-In-Time (JIT) privileged-access approval workflows, including customer-owned approval processes. - Define identity and authorization models supporting: - Customers - Internal employees - External contractors - Business partners - Design identity federation and authentication patterns using enterprise identity platforms. - Ensure security controls, authorization decisions, privileged access, and user activity are appropriately auditable. Enterprise Integration & Master Data - Define integration architecture between ThingWorx/SmartConnect and Unity (Salesforce) for endpoint master data. - Establish system-of-record ownership and read-only data-field principles. - Design synchronization, reconciliation, error handling, retry, and recovery mechanisms. - Provide visibility into synchronization status and last-successful-sync information. - Establish standards for REST APIs, events, data contracts, and integration patterns across enterprise systems. - Support integrations with IAM/IdP platforms, Salesforce, CMDB, SAP, logging, monitoring, and other enterprise applications. Non-Functional Architecture Define and govern non-functional requirements covering: - Availability and high availability - Performance - Scalability - Resiliency and recovery - Security and privacy - Observability and monitoring - Auditability - Maintainability - Supportability - Deployment and release management Ensure architectural decisions support production operations, troubleshooting, future enhancements, and platform upgrades. Architecture Governance & Delivery Support - Lead architecture reviews, technical design reviews, threat-modeling discussions, and design-assurance activities. - Identify architectural risks, technical dependencies, and mitigation strategies. - Review implementation designs and code to ensure compliance with approved architectural patterns. - Provide technical leadership and guidance to ThingWorx consultants, developers, integration engineers, and infrastructure teams. - Partner closely with Product Management, Engineering, Cybersecurity, QA, Service Operations, Infrastructure, and enterprise integration teams. - Communicate architectural decisions, risks, dependencies, and recommendations effectively to technical and executive stakeholders. Migration & Coexistence - Define the migration strategy from the existing SmartConnect implementation to the next-generation platform. - Develop migration and coexistence architecture to minimize business and operational disruption. - Identify opportunities to reduce technical debt during modernization. - Define deployment, transition, rollback, and release strategies. SmartConnect Capability Alignment Capability AreaUser NeedsArchitect Responsibility Remote AccessUN-1 to UN-4Define secure session management, gateway routing, consent, endpoint availability, transfer, failure handling, and audit architecture. Automation & Systematic DataUN-5 to UN-6Define ingestion, checksum validation, retry, endpoint targeting, execution, results, and observability patterns. Access GovernanceUN-7 to UN-9Architect visibility groups, RBAC, least privilege, and customer-owned JIT approval workflows. Unity Master-Data SynchronizationUN-10Define system-of-record integration, reconciliation, ownership, synchronization, and failure-handling architecture. Multiple User PopulationsUN-11Define identity federation, population classification, policy enforcement, authorization, and auditable access patterns. Required Qualifications - 8+ years of experience designing enterprise software, industrial IoT, connected-product, remote-service, or similar technology solutions. - 5+ years of hands-on ThingWorx architecture or senior development experience, including ThingWorx 9.x and/or 10.x. - 3 to 5 years of strong experience with ThingWorx Composer, modeling, Mashups, services, events, subscriptions, security, persistence, deployment, and integrations. - 3+ years of demonstrated experience with Smart Connected Product Accelerator (SCPA) or comparable ThingWorx solution/building-block architecture. - 3 to 5 years of strong understanding of ThingWorx Thing Templates, Thing Shapes, Data Shapes, asset hierarchies, services, and persistence models. - Experience designing secure remote-access, endpoint-management, connected-device, or fleet-automation solutions. - Strong knowledge of RBAC, identity federation, segmented/multi-tenant visibility, approval workflows, audit logging, and least-privilege security principles. - Experience designing enterprise REST/API and event-driven integrations. - Experience integrating platforms such as Salesforce, IAM/IdP, CMDB, SAP, monitoring, and logging systems. - Ability to translate functional requirements and Given/When/Then acceptance criteria into technical architecture and implementation guidance. - Strong experience with architecture governance, design reviews, technical risk management, and documentation. - Excellent written and verbal communication skills with the ability to work effectively with technical, security, operational, business, and executive stakeholders. Preferred Qualifications - ThingWorx Developer, Model Specialist, Deploy Specialist, or equivalent certification. - Hands-on experience with SCPA extension points, custom building blocks, reusable components, and upgrade-safe architecture. - Experience with Microsoft Azure. - Knowledge of SAML, OAuth/OIDC, Microsoft Entra ID, identity federation, and privileged-access management. - Experience with PostgreSQL and ThingWorx persistence architecture. - Experience designing high-availability ThingWorx environments. - Knowledge of enterprise observability, logging, monitoring, and alerting platforms. - Experience with CI/CD pipelines, DevOps, infrastructure automation, and automated deployment. - Experience working within regulated healthcare, medical-device, life-sciences, cybersecurity, or quality-controlled product environments. Expected Deliverables The Technical Solution Architect will be responsible for producing and maintaining: - Solution Architecture Document - Context, container, component, and integration diagrams - SCPA fit-gap assessment - Configure / Integrate / Extend / Custom-build recommendations - ThingWorx Thing and asset model - Data and persistence architecture - Security and RBAC model - Identity and federation architecture - Visibility-group design - Remote-access architecture - JIT privileged-access workflow design - Endpoint automation architecture - Unity/Salesforce integration design - API, event, and data contracts - Non-functional requirements - Operational and observability architecture - Architecture Decision Records (ADRs) - Threat-model inputs - Technical risk and mitigation plans - Migration and coexistence architecture - Deployment and release architecture - Technical standards and implementation guardrails - Architecture and design-review outcomes Measures of Success Success in this role will be measured by the ability to: - Deliver an architecture that provides clear traceability to approved requirements and acceptance criteria. - Maximize the use of SCPA standard configuration and reusable building blocks wherever practical. - Minimize unnecessary customization and technical debt. - Ensure custom development is justified, governed, testable, maintainable, reusable, and upgrade-safe. - Build security, auditability, least privilege, resiliency, scalability, and operational supportability into the architecture from the outset. - Provide development and delivery teams with clear architectural decisions, interfaces, standards, and non-functional expectations. - Enable successful migration to the next-generation SmartConnect platform with minimal disruption to existing users and operations. Key Skills ThingWorx 10.x | Smart Connected Product Accelerator (SCPA) | ThingWorx Architecture | Industrial IoT | Connected Products | Thing Modeling | Thing Templates | Thing Shapes | Data Shapes | Mashups | REST APIs | Remote Access | Endpoint Management | RBAC | JIT Access | Identity Federation | SAML | OIDC | Microsoft Entra ID | Salesforce Integration | PostgreSQL | Azure | Security Architecture | API & Integration Architecture | High Availability | Observability | CI/CD | Solution Architecture About NTT DATA NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D. Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us. NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.