What are the responsibilities and job description for the Network Security Architect (PLM) position at InvestM Technology LLC?
We are seeking a highly experienced Network Security Architect – PLM to design, implement, and secure enterprise Product Lifecycle Management (PLM) environments. The ideal candidate will have deep expertise in network security architecture, cloud security, zero-trust principles, and securing PLM platforms such as Siemens Teamcenter, PTC Windchill, Dassault ENOVIA, Aras Innovator, and Autodesk Vault.
Key Responsibilities
Security Architecture
- Design and implement secure network architectures for enterprise PLM ecosystems.
- Develop end-to-end security strategies for PLM, CAD, PDM, and engineering collaboration platforms.
- Define security standards, architecture principles, and governance for PLM deployments.
- Implement Zero Trust Network Architecture (ZTNA) and secure access models.
PLM Security
- Architect security controls for Siemens Teamcenter, PTC Windchill, Dassault ENOVIA, Aras Innovator, and Autodesk Vault.
- Secure engineering workflows, CAD repositories, and product data.
- Design role-based access control (RBAC) and attribute-based access control (ABAC) models.
- Implement secure authentication and authorization using SSO, LDAP, Active Directory, OAuth 2.0, OpenID Connect, and SAML.
Network Security
- Design secure enterprise LAN, WAN, SD-WAN, VPN, and cloud connectivity.
- Implement network segmentation and micro-segmentation for engineering environments.
- Configure and manage firewalls, IDS/IPS, Web Application Firewalls (WAF), and secure gateways.
- Secure remote access for engineering teams, suppliers, and external partners.
Required Technical Skills
PLM Platforms
- Siemens Teamcenter
- PTC Windchill
- Dassault ENOVIA
- Aras Innovator
- Autodesk Vault
-
Security Technologies
- Zero Trust Architecture (ZTA)
- Firewalls (Palo Alto, Cisco, Fortinet, Check Point)
- IDS/IPS
- WAF
- VPN
- NAC
- SD-WAN
- PKI
- IAM
- PAM
- MFA
- DLP
Networking
- TCP/IP
- DNS
- DHCP
- VLAN
- BGP
- OSPF
- MPLS
- VPN
- Load Balancing
- Reverse Proxy
Security Tools
- Splunk
- Microsoft Sentinel
- QRadar
- CrowdStrike
- Defender for Endpoint
- Nessus
- Qualys
- Wireshark
Preferred Certifications
- CISSP
- CCSP
- CCIE Security
- Palo Alto PCNSE
- AWS Certified Security – Specialty
- Microsoft Azure Security Engineer Associate
- TOGAF
- CISM