Software Architect

We are Progress (Nasdaq: PRGS) - the trusted provider of software that enables our customers to develop, deploy and manage responsible, AI-powered applications and experience with agility and ease.
We’re proud to have a diverse, global team where we value the individual and enrich our culture by considering varied perspectives because we believe people power progress. Join us as a Software Architect and help us do what we do best: propelling business forward. Know more about us.
Overview: We are seeking an experienced Product Security Architect to drive the security strategy, architecture, and secure engineering practices across the OpenEdge product portfolio. This role serves as the primary security authority for OpenEdge, partnering closely with Product Management, Engineering, Architecture, DevOps, Corporate Security, and SSCoE teams to ensure security is embedded throughout the product lifecycle.
The ideal candidate is a seasoned product security professional with deep knowledge of enterprise software platforms, secure software development, cloud and on-premises security models, vulnerability management, compliance frameworks, and security architecture. This individual will provide strategic technical leadership, influence product direction, and champion a security-first engineering culture.
In this role you will:
Product Security Strategy & Architecture
Define and maintain the overall security architecture and roadmap for OpenEdge products.
Act as the principal security advisor for product management, engineering leadership, and architecture teams.
Evaluate emerging threats, technologies, and industry trends to influence product security investments.
Lead security design reviews for major architectural initiatives and new product capabilities.
Ensure security requirements are incorporated during roadmap planning and architectural runway activities.
Secure Software Development Lifecycle (SSDLC)
Establish and enforce secure development practices across all OpenEdge teams.
Define security quality gates for software design, implementation, testing, build, and release processes.
Drive adoption and continuous improvement of OWASP SAMM and secure SDLC maturity initiatives.
Provide guidance on secure coding, security testing, and vulnerability remediation practices.
Threat Modeling & Risk Management
Lead threat modeling exercises for OpenEdge platform components.
Identify and assess product security risks and recommend mitigation strategies.
Conduct architecture risk assessments for new features, integrations, APIs, AI capabilities, and cloud services.
Maintain risk registers and communicate security posture to leadership.
Security Testing & Vulnerability Management
Drive SAST, DAST, SCA, penetration testing, and code review initiatives.
Partner with engineering teams to prioritize and remediate vulnerabilities.
Define vulnerability response, SLA tracking, and remediation processes.
Provide technical oversight for coordinated vulnerability disclosure programs.
Platform & Infrastructure Security
Establish security requirements for the OpenEdge Database, PASOE, authentication and authorization services, MCP integrations, DevOps tooling, cloud deployments, and container or Kubernetes platforms.
Define secure deployment architectures and hardening recommendations.
Compliance & Governance
Drive compliance initiatives, including SOC 2, security certifications, FIPS-related requirements, customer security assessments, and regulatory or contractual security obligations.
Lead SBOM strategy, third-party component governance, and software supply chain security initiatives.
Partner with Legal, Compliance, and Corporate Security teams to address security requirements.
Security Leadership & Cross-Functional Collaboration
Serve as a trusted technical leader across OpenEdge Engineering.
Mentor engineers, security champions, and architects on product security best practices.
Influence strategic security decisions and investment prioritization.
Present security posture, risks, and recommendations to senior leadership and executives.

Skills
Kubernetes, Product Management, Risk Management