Haystack
← Back to Jobs
Administrative

Network Security Architect (PLM)

InvestM Technology LLCSunnyvale, CA🇺🇸United StatesPosted 6 Aug 2026

Quick Overview

Work Type
Hybrid
Level
Mid Senior

Job Description

We are seeking a highly experienced Network Security Architect – PLM to design, implement, and secure enterprise Product Lifecycle Management (PLM) environments. The ideal candidate will have deep expertise in network security architecture, cloud security, zero-trust principles, and securing PLM platforms such as Siemens Teamcenter, PTC Windchill, Dassault ENOVIA, Aras Innovator, and Autodesk Vault.

Key Responsibilities

Security Architecture

  • Design and implement secure network architectures for enterprise PLM ecosystems.
  • Develop end-to-end security strategies for PLM, CAD, PDM, and engineering collaboration platforms.
  • Define security standards, architecture principles, and governance for PLM deployments.
  • Implement Zero Trust Network Architecture (ZTNA) and secure access models.

PLM Security

  • Architect security controls for Siemens Teamcenter, PTC Windchill, Dassault ENOVIA, Aras Innovator, and Autodesk Vault.
  • Secure engineering workflows, CAD repositories, and product data.
  • Design role-based access control (RBAC) and attribute-based access control (ABAC) models.
  • Implement secure authentication and authorization using SSO, LDAP, Active Directory, OAuth 2.0, OpenID Connect, and SAML.

Network Security

  • Design secure enterprise LAN, WAN, SD-WAN, VPN, and cloud connectivity.
  • Implement network segmentation and micro-segmentation for engineering environments.
  • Configure and manage firewalls, IDS/IPS, Web Application Firewalls (WAF), and secure gateways.
  • Secure remote access for engineering teams, suppliers, and external partners.

    Required Technical Skills

    PLM Platforms

  • Siemens Teamcenter
  • PTC Windchill
  • Dassault ENOVIA
  • Aras Innovator
  • Autodesk Vault
  • Security Technologies

  • Zero Trust Architecture (ZTA)
  • Firewalls (Palo Alto, Cisco, Fortinet, Check Point)
  • IDS/IPS
  • WAF
  • VPN
  • NAC
  • SD-WAN
  • PKI
  • IAM
  • PAM
  • MFA
  • DLP

Networking

  • TCP/IP
  • DNS
  • DHCP
  • VLAN
  • BGP
  • OSPF
  • MPLS
  • VPN
  • Load Balancing
  • Reverse Proxy

Security Tools

  • Splunk
  • Microsoft Sentinel
  • QRadar
  • CrowdStrike
  • Defender for Endpoint
  • Nessus
  • Qualys
  • Wireshark

Preferred Certifications

  • CISSP
  • CCSP
  • CCIE Security
  • Palo Alto PCNSE
  • AWS Certified Security – Specialty
  • Microsoft Azure Security Engineer Associate
  • TOGAF
  • CISM
 
 
 

Similar jobs