Sr Principal, Software Engineering Security Architect

AspenTech is a global software leader helping industries meet the increasing demand for resources from a rapidly growing population in a profitable and sustainable manner. Our Digital Grid Management software suite, including AspenTech OSI products, helps power and utilities companies achieve superior real-time control, optimization and management for exceptional performance of complex energy networks.

• Oversee design and implementation of security and compliance aspects of AspenTech's software platform, including Identity Access Management (IAM), data protection, and threat management.
• Understand and integrate various authorization models from existing products into a cohesive design for centralized services, ensuring alignment with industry standards.
• Direct the work of Platform Development teams to ensure security measures are integrated across solutions.
• Drive the implementation of security policies, standards, and procedures to ensure the platform's integrity and confidentiality, collaborating with Product Security to align with and complement security objectives.
• Collaborate with other Architects and Engineering teams to integrate security best practices into the Platform's design and development.
• Work with Product Security on security assessments and audits to identify vulnerabilities, ensuring compliance with industry standards and regulations.
• Stay updated with the latest security trends, threats, and technologies to continuously improve the Platform's security posture.
• Collaborate with customer support and services teams on the integration of the platform security services with customer environment.

• Bachelor's degree in computer science, Information Security, or a related technical field.

• Proven experience designing and implementing security solutions in software solutions.
• Proven experience of developing commercial software (good knowledge of C++, Java, C# desirable)
• Strong knowledge of Identity Access Management (IAM), OIDC/OAuth, and Policy Based Access Control.
• Strong knowledge of security frameworks and standards, such as NIST, ISO 27001, NERC CIP, CIS benchmarks, AWS cloud security practices, Azure Cloud Security Practices.
• Experience with supply chain security, including securing supply chain processes, managing third-party risks, and ensuring compliance with relevant regulations and standards.
• Experience with cloud-native technologies such as Docker and Kubernetes, including expertise in runtime security for Docker and control plane security for Kubernetes. Familiarity with tools related to policy enforcement, security monitoring, and compliance checks.
• Familiarity with security technologies and tools, including firewalls, intrusion detection/prevention systems, and encryption.
• Excellent problem-solving and analytical skills.

The salary range for this role is $146,900 to $183,600. This range represents what we in good faith believe is the range possible for base compensation for this role at the time of this posting. We may ultimately pay more or less than the posted range based on several factors. This range may be modified in the future. This role is also eligible for bonus or variable incentive pay. Additionally, we offer a comprehensive benefits package including paid time off, charitable giveback day, medical/dental/vision insurance, and retirement benefits to eligible employees.

#LI-RT1