Platform Security Architect - Digital Power Grid Software Engineering

The driving force behind our success has always been the people of AspenTech. What drives us, is our aspiration, our desire and ambition to keep pushing the envelope, overcoming any hurdle, challenging the status quo to continually find a better way. You will experience these qualities of passion, pride and aspiration in many ways - from a rich set of career development programs to support of community service projects to social events that foster fun and relationship building across our global community.

• Oversee design and implementation of security and compliance aspects of AspenTech's software platform, including Identity Access Management (IAM), data protection, and threat management.
• Understand and integrate various authorization models from existing products into a cohesive design for centralized services, ensuring alignment with industry standards.
• Direct the work of Platform Development teams to ensure security measures are integrated across solutions.
• Drive the implementation of security policies, standards, and procedures to ensure the platform's integrity and confidentiality, collaborating with Product Security to align with and complement security objectives.
• Collaborate with other Architects and Engineering teams to integrate security best practices into the Platform's design and development.
• Work with Product Security on security assessments and audits to identify vulnerabilities, ensuring compliance with industry standards and regulations.
• Stay updated with the latest security trends, threats, and technologies to continuously improve the Platform's security posture.
• Collaborate with customer support and services teams on the integration of the platform security services with customer environment.

• Bachelor's degree in computer science, Information Security, or a related technical field.

• Proven experience designing and implementing security solutions in software solutions.
• Proven experience of developing commercial software (good knowledge of C++, Java, C# desirable)
• Strong knowledge of Identity Access Management (IAM), OIDC/OAuth, and Policy Based Access Control.
• Strong knowledge of security frameworks and standards, such as NIST, ISO 27001, NERC CIP, CIS benchmarks, AWS cloud security practices, Azure Cloud Security Practices.
• Experience with supply chain security, including securing supply chain processes, managing third-party risks, and ensuring compliance with relevant regulations and standards.
• Experience with cloud-native technologies such as Docker and Kubernetes, including expertise in runtime security for Docker and control plane security for Kubernetes. Familiarity with tools related to policy enforcement, security monitoring, and compliance checks.
• Familiarity with security technologies and tools, including firewalls, intrusion detection/prevention systems, and encryption.
• Excellent problem-solving and analytical skills.

#LI-RT1