Windchill Security Architect

The ideal candidate will possess deep expertise in software development and application security, with a strong focus on designing, developing, and implementing scalable security solutions that enhance the security posture of applications and platforms.

This role is responsible for identifying and driving scalable product security solutions to address application security risks. The candidate will work closely with Product Management, Development, and Application Security teams to identify security gaps, define remediation strategies, Identify and Develop practical and reusable security solutions with hands on working that can be adopted across engineering organizations.

Key Responsibilities

•Serve as a trusted advisor and subject matter expert with deep hands-on experience in Java, Spring Boot, Microservices, Cloud-Native Architectures, Application Security, Container Security, Identity & Access Management (IAM), and Secure Software Development.

•Analyse and assess security issues identified through threat modelling, security architecture reviews, secure development pattern assessments, security scanning tools, and customer-reported cases, and evaluate their security impact/ Risk on application security.

•Collaborate closely with Product Management, Development, Application Security, and Platform Engineering teams to design and deliver effective solutions with actual hands on, including reusable security frameworks, reference architectures, and remediation guidance that can be leveraged across engineering organizations.

•Drive the adoption of security best practices and secure design patterns across products and platforms to strengthen the overall security posture.

•Leverage 15+ years of hands-on software development experience, with deep expertise in Java and enterprise application development, to design and deliver large-scale, mission-critical software solutions.

•Act as a Subject Matter Expert (SME) in modern application development and architecture, with extensive experience in Java, Spring Boot, Microservices, REST APIs, Distributed Systems, and Cloud-Native technologies.

•Apply strong software engineering fundamentals, including object-oriented design, software architecture, design patterns, secure coding practices, and modern development frameworks such as .NET, Python, JavaScript, React, Angular, and Node.js.

Your Team

You will be part of the PLM R&D – Platform organization.

Must-Have Skills

• 15+ years of hands-on experience in application development and architecture, with deep expertise in Java, Spring Boot, Microservices, REST APIs, Distributed Systems, and Cloud-Native technologies.

• Application Security & Cloud Security: Strong understanding of Application Security standards and frameworks, Secure SDLC, OWASP Top 10, OWASP ASVS, Secure Coding Practices, Threat Modeling, Secure Design Reviews, Vulnerability Management, API Security, Penetration Testing, and security testing methodologies including SAST, DAST, IAST, and SCA.

• Identity & Access Management (IAM): OAuth 2.0, OpenID Connect (OIDC), SAML, LDAP, Active Directory, Microsoft Entra ID (Azure AD), and Privileged Access Management (PAM).

• Strong hands-on experience in designing, developing, and implementing scalable security architectures, frameworks, and reusable security solutions across enterprise applications, platforms, and cloud-native environments

Required Qualifications

Education

• Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or a related discipline.

Life at PTC is about more than working with today’s most cutting-edge technologies to transform the physical world. It’s about showing up as you are and working alongside some of today’s most talented industry leaders to transform the world around you.

If you share our passion for problem-solving through innovation, you’ll likely become just as passionate about the PTC experience as we are. Are you ready to explore your next career move with us?

We respect the privacy rights of individuals and are committed to handling Personal Information responsibly and in accordance with all applicable privacy and data protection laws. Review our Privacy Policy here."