Senior Principal, Platform Security Architect

Schneider Electric; Andover (MA); On-site; USD 168,800 - 253,200; Full time

Benefits offered by this job

Medical, dental, vision benefits

Paid holidays and vacation

401(k) + match

Career development programs

Volunteer leave

Job summary

Schneider Electric’s EcoStruxure Platform Architecture team seeks a Sr. Platform Security Architect to drive the platform security strategy across embedded devices to cloud services.

You will partner with engineering, product, cybersecurity, and business teams to design security capabilities, apply Zero Trust, and ensure scalable, compliant security across the EcoStruxure Platform. The role requires deep cloud and device security expertise, hands-on experience with AWS/Azure/GCP, and a track

Qualifications

• 12+ years of experience in software architecture, systems engineering, or cybersecurity.
• 6+ years designing security solutions for large-scale cloud and/or IoT platforms.
• 4+ years in cloud security architecture with Azure, AWS, or Google Cloud.
• Experience designing multi-tenant security architectures with tenancy isolation.
• Hands-on knowledge of IAM, OAuth2, PKI, threat modeling, and DevSecOps.
• Familiarity with industry cybersecurity standards and regulatory frameworks.
• Experience operating within Agile/SAFe delivery environments.

Responsibilities

• Translate business, customer, and regulatory requirements into platform security architecture requirements.
• Design platform security capabilities: device-to-cloud trust, multi-tenant isolation, authentication and authorization, data protection, API security.
• Define and evolve security architecture and design patterns; apply Zero Trust and defense-in-depth.
• Define security processes, standards, and guardrails including SDLC and architecture reviews.
• Collaborate with cybersecurity community and leadership; mentor security champions.
• Lead security vendor assessments and evaluate cloud security solutions.

Skills

Security architecture

Cloud security

Device security

Threat modeling

DevSecOps

SAFe / Agile

Leadership

Communication

Education

CS / Cybersecurity / Engineering degree

Tools

AWS

Azure

Google Cloud

Job description

About The Team The EcoStruxure Platform Architecture team, within Schneider Digital, is responsible for creating and evolving the Schneider Electric EcoStruxure Platform, a global Data and IoT platform that connects assets, unlocks the value of data and AI, and accelerates digital offers across Schneider Electric’s Lines of Business, including Buildings, Industry, Infrastructure, and Energy.

About The Team The EcoStruxure Platform Architecture team, within Schneider Digital, is responsible for creating and evolving the Schneider Electric EcoStruxure Platform, a global Data and IoT platform that connects assets, unlocks the value of data and AI, and accelerates digital offers across Schneider Electric’s Lines of Business, including Buildings, Industry, Infrastructure, and Energy.

The platform powers the devices, applications, data services, and cloud capabilities that collectively enable the EcoStruxure ecosystem. The Platform Architecture team is responsible for the technical direction, overall platform architecture, and design patterns that platform engineering teams build against.

About The Role As the Sr. Platform Security Architect, you will serve as the trusted advisor for security across the EcoStruxure Platform. You will be responsible for defining and driving the platform’s security architecture and strategic direction, from embedded devices through cloud services.

As part of the Platform Architecture team, you will work with engineering, product, cybersecurity, and business teams to design and architect the security capabilities of the EcoStruxure Platform. You will collaborate closely with Schneider Electric’s cybersecurity community, including Cybersecurity Architects and Cybersecurity Advisors across Business Units and Lines of Business, to ensure consistent security practices across the platform.

The ideal candidate brings a proven track record as a security-focused software architect, with deep expertise in cloud and device security, hands‑on experience with at least one major cloud platform such as AWS, Azure, or GCP, and the ability to navigate and influence across a large, matrixed engineering organization.

Key Responsibilities

Security Architecture and Design

• Translate business, customer, and regulatory requirements into platform security architecture requirements.
• Design and architect platform security capabilities, including device-to-cloud trust chains, multi-tenant isolation, authentication and authorization models, data protection, and API security.
• Define and evolve the security architecture and design patterns for the EcoStruxure Platform. Apply Zero Trust, defense-in-depth, and secure-by-design principles across the platform stack.

Process and Governance

• Define and evolve security processes, standards, and guardrails for the platform organization, including the Secure Development Lifecycle, architecture review processes, and formal cybersecurity review gates. Validate platform components through threat modeling, architecture reviews, and coordination with penetration testing resources.
• Align platform security architecture with stakeholders, including cybersecurity certification strategies defined with Lines of Business for their offer roadmaps and compliance requirements.
• Monitor approved technologies for threats, vulnerabilities, and updates. Oversee mitigation of security issues across platform components.

Collaboration and Enablement

• Collaborate with the Schneider Electric cybersecurity community, including Cybersecurity Architects, Cybersecurity Advisors, the Product Security Office, and the internal platform architect community, to ensure consistent security practices across the platform. Advise senior leadership on security posture and emerging threats.
• Provide security architecture guidance to platform development teams and support DevSecOps adoption across the platform organization. Mentor and coach security champions and junior architects.

Innovation and Technology

• Stay current on emerging threats, technologies, and regulatory requirements. Build proofs of concept to evolve the platform security architecture.
• Lead security vendor and technology assessments. Evaluate partner solutions for cloud security, identity management, and cryptographic infrastructure.

Education

• Graduate or postgraduate degree in Computer Science, Cybersecurity, Engineering, or a related field.

Experience

• 12+ years of experience in software architecture, systems engineering, or cybersecurity
• 6+ years designing and architecting security solutions for large-scale cloud and/or IoT platforms
• 4+ years working with cloud platform security architecture, with experience in at least one of Azure, AWS, or Google Cloud
• Prior experience designing platform security capabilities that are scalable, operationally efficient, and aligned with industry compliance frameworks
• Experience designing multi-tenant security architectures, including tenancy isolation, authentication, and authorization models
• Proven experience managing and working with teams based in multiple geographies
• Hands-on knowledge of cloud security architecture, container/Kubernetes security, identity and access management, including OAuth2, PKI, and certificate lifecycle, threat modeling, and DevSecOps
• Deep knowledge of applicable industry cybersecurity standards and regulatory frameworks relevant to cloud, IoT, and industrial systems
• Experience operating as a security architect within Agile and SAFe delivery organizations.

Soft Skills

• Excellent verbal and written communication skills, including the ability to explain security concepts to technical and non-technical audiences
• Ability to build consensus and influence without direct authority across a matrixed organization
• Strong problem-solving capabilities and detail orientation.

Preferred Qualifications

• Experience with security concepts such as Root-of-Trust, secure boot, and device attestation
• Knowledge of OT/IoT protocols and their security implications, including Modbus, OPC-UA, and MQTT
• CISSP, CSSLP, CISM, AZ-500, or AWS Security Specialty certification
• Experience with industrial cybersecurity certification processes, including IEC 62443 component/system certification
• Supply chain security experience, including SBOM generation, dependency scanning, and software provenance.

For this U.S. based position, the expected pay range is USD 168,800 - USD 253,200 per year. This pay range includes base pay and short-term incentives. The compensation range for this full-time position applies to candidates located within the United States. Our pay ranges are determined by reviewing roles of similar responsibility and level. Within the pay range, individual pay is determined by several factors including performance, knowledge, job-related skills, experience, and relevant education or training.

Schneider Electric is there when it matters most to you.

Our Total Rewards package outlines all the benefits and support you’ll enjoy as part of the Schneider Electric team:

• Care for Yourself and Your Family. We ensure you feel secure with benefits that help you and your family thrive: medical (with member reward points), dental, vision, and basic life insurance, Benefit Bucks (credits to apply towards your benefits), flexible work arrangements, paid family leaves, well‑being programs, 12 holidays per year, 20 days of paid time off per year (pro‑rated in the first year of employment based on start date).
• Invest and Plan Your Future. We help you plan and invest for the future with competitive pay and programs: your base salary, short‑term incentives or sales incentives, opportunities to own company shares (eligibility depends on start date), and 401(k) + match.
• Grow Your Skills and Career. We commit to helping you grow with ongoing performance and development conversations, Senior Talent Program, global career opportunities, access to our Schneider Career Hub for new positions, projects, and mentors, and learning platforms like Coursera to equip you with the skills for today and tomorrow.
• Team Up in the Workplace. We encourage teaming up through project opportunities on the Schneider Career Hub, smart ways to collaborate, celebrating contributions via a recognition program (including service anniversary), sharing your voice in our engagement survey, and fostering an inclusive, caring workplace.
• Support Your Community. We make a difference in your community with volunteer leave, programs through the Schneider Electric Foundation, initiatives that support youth education, and military leave benefits.

We are looking for IMPACT Makers; exceptional people who turn sustainability ambitions into actions at the intersection of automation, electrification, and digitization. We celebrate IMPACT Makers and believe everyone has the potential to be one.

Schneider Electric aspires to be the most inclusive and caring company in the world, by providing equitable opportunities to everyone, everywhere, and ensuring all employees feel uniquely valued and safe to contribute their best. We mirror the diversity of the communities in which we operate, and ‘inclusion’ is one of our core values. We believe our differences make us stronger as a company and as individuals and we are committed to championing inclusivity in everything we do.

At Schneider Electric, we uphold the highest standards of ethics and compliance, and we believe that trust is a foundational value. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity, underpinning every aspect of our business and our willingness to behave and respond respectfully and in good faith to all our stakeholders. We can find out more about our Trust Charter here.

Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status or any other legally protected characteristic or conduct.