Senior Principal, Platform Security Architect

About the Team

The EcoStruxure Platform Architecture team, within Schneider Digital, is responsible for creating and evolving the Schneider Electric EcoStruxure Platform, a global Data and IoT platform that connects assets, unlocks the value of data and AI, and accelerates digital offers across Schneider Electric's Lines of Business, including Buildings, Industry, Infrastructure, and Energy.

The platform powers the devices, applications, data services, and cloud capabilities that collectively enable the EcoStruxure ecosystem. The Platform Architecture team is responsible for the technical direction, overall platform architecture, and design patterns that platform engineering teams build against.
About the Role

As the Sr. Platform Security Architect, you will serve as the trusted advisor for security across the EcoStruxure Platform. You will be responsible for defining and driving the platform's security architecture and strategic direction, from embedded devices through cloud services.

As part of the Platform Architecture team, you will work with engineering, product, cybersecurity, and business teams to design and architect the security capabilities of the EcoStruxure Platform. You will collaborate closely with Schneider Electric's cybersecurity community, including Cybersecurity Architects and Cybersecurity Advisors across Business Units and Lines of Business, to ensure consistent security practices across the platform.

The ideal candidate brings a proven track record as a security-focused software architect, with deep expertise in cloud and device security, hands-on experience with at least one major cloud platform such as AWS, Azure, or GCP, and the ability to navigate and influence across a large, matrixed engineering organization.

1. Translate business, customer, and regulatory requirements into platform security architecture requirements.
2. Design and architect platform security capabilities, including device-to-cloud trust chains, multi-tenant isolation, authentication and authorization models, data protection, and API security.
3. Define and evolve the security architecture and design patterns for the EcoStruxure Platform. Apply Zero Trust, defense-in-depth, and secure-by-design principles across the platform stack.

1. Define and evolve security processes, standards, and guardrails for the platform organization, including the Secure Development Lifecycle, architecture review processes, and formal cybersecurity review gates. Validate platform components through threat modeling, architecture reviews, and coordination with penetration testing resources.
2. Align platform security architecture with stakeholders, including cybersecurity certification strategies defined with Lines of Business for their offer roadmaps and compliance requirements.
3. Monitor approved technologies for threats, vulnerabilities, and updates. Oversee mitigation of security issues across platform components.

1. Collaborate with the Schneider Electric cybersecurity community, including Cybersecurity Architects, Cybersecurity Advisors, the Product Security Office, and the internal platform architect community, to ensure consistent security practices across the platform. Advise senior leadership on security posture and emerging threats.
2. Provide security architecture guidance to platform development teams and support DevSecOps adoption across the platform organization. Mentor and coach security champions and junior architects.

1. Stay current on emerging threats, technologies, and regulatory requirements. Build proofs of concept to evolve the platform security architecture.
2. Lead security vendor and technology assessments. Evaluate partner solutions for cloud security, identity management, and cryptographic infrastructure.

• Graduate or postgraduate degree in Computer Science, Cybersecurity, Engineering, or a related field

• 12+ years of experience in software architecture, systems engineering, or cybersecurity
• 6+ years designing and architecting security solutions for large-scale cloud and/or IoT platforms
• 4+ years working with cloud platform security architecture, with experience in at least one of Azure, AWS, or Google Cloud
• Prior experience designing platform security capabilities that are scalable, operationally efficient, and aligned with industry compliance frameworks
• Experience designing multi-tenant security architectures, including tenancy isolation, authentication, and authorization models
• Proven experience managing and working with teams based in multiple geographies
• Hands-on knowledge of cloud security architecture, container/Kubernetes security, identity and access management, including OAuth2, PKI, and certificate lifecycle, threat modeling, and DevSecOps
• Deep knowledge of applicable industry cybersecurity standards and regulatory frameworks relevant to cloud, IoT, and industrial systems
• Experience operating as a security architect within Agile and SAFe delivery organizations

• Excellent verbal and written communication skills, including the ability to explain security concepts to technical and non-technical audiences
• Ability to build consensus and influence without direct authority across a matrixed organization
• Strong problem-solving capabilities and detail orientation

• Experience with security concepts such as Root-of-Trust, secure boot, and device attestation
• Knowledge of OT/IoT protocols and their security implications, including Modbus, OPC-UA, and MQTT
• CISSP, CSSLP, CISM, AZ-500, or AWS Security Specialty certification
• Experience with industrial cybersecurity certification processes, including IEC 62443 component/system certification
• Supply chain security experience, including SBOM generation, dependency scanning, and software provenance