Software Architect

We are Progress (Nasdaq: PRGS) - the trusted provider of software that enables our customers to develop, deploy and manage responsible, AI-powered applications and experience with agility and ease.

We’re proud to have a diverse, global team where we value the individual and enrich our culture by considering varied perspectives because we believe people power progress. Join us as a Software Architect and help us do what we do best: propelling business forward. Know more about us .

Overview: We are seeking an experienced Product Security Architect to drive the security strategy, architecture, and secure engineering practices across the OpenEdge product portfolio. This role serves as the primary security authority for OpenEdge, partnering closely with Product Management, Engineering, Architecture, DevOps, Corporate Security, and SSCoE teams to ensure security is embedded throughout the product lifecycle.

The ideal candidate is a seasoned product security professional with deep knowledge of enterprise software platforms, secure software development, cloud and on-premises security models, vulnerability management, compliance frameworks, and security architecture. This individual will provide strategic technical leadership, influence product direction, and champion a security-first engineering culture.

In this role you will:

Product Security Strategy & Architecture

Define and maintain the overall security architecture and roadmap for OpenEdge products.

Act as the principal security advisor for product management, engineering leadership, and architecture teams.

Evaluate emerging threats, technologies, and industry trends to influence product security investments.

Lead security design reviews for major architectural initiatives and new product capabilities.

Ensure security requirements are incorporated during roadmap planning and architectural runway activities.

Secure Software Development Lifecycle (SSDLC)

Establish and enforce secure development practices across all OpenEdge teams.

Define security quality gates for software design, implementation, testing, build, and release processes.

Drive adoption and continuous improvement of OWASP SAMM and secure SDLC maturity initiatives.

Provide guidance on secure coding, security testing, and vulnerability remediation practices.

Threat Modeling & Risk Management

Lead threat modeling exercises for OpenEdge platform components.

Identify and assess product security risks and recommend mitigation strategies.

Conduct architecture risk assessments for new features, integrations, APIs, AI capabilities, and cloud services.

Maintain risk registers and communicate security posture to leadership.

Security Testing & Vulnerability Management

Drive SAST, DAST, SCA, penetration testing, and code review initiatives.

Partner with engineering teams to prioritize and remediate vulnerabilities.

Define vulnerability response, SLA tracking, and remediation processes.

Provide technical oversight for coordinated vulnerability disclosure programs.

Platform & Infrastructure Security

Establish security requirements for the OpenEdge Database, PASOE, authentication and authorization services, MCP integrations, DevOps tooling, cloud deployments, and container or Kubernetes platforms.

Define secure deployment architectures and hardening recommendations.

Compliance & Governance

Drive compliance initiatives, including SOC 2, security certifications, FIPS-related requirements, customer security assessments, and regulatory or contractual security obligations.

Lead SBOM strategy, third-party component governance, and software supply chain security initiatives.

Partner with Legal, Compliance, and Corporate Security teams to address security requirements.

Security Leadership & Cross-Functional Collaboration

Serve as a trusted technical leader across OpenEdge Engineering.

Mentor engineers, security champions, and architects on product security best practices.

Influence strategic security decisions and investment prioritization.

Present security posture, risks, and recommendations to senior leadership and executives.

Incident Response & Security Operations

Support investigation of security incidents affecting OpenEdge products.

Coordinate root-cause analysis and long-term remediation initiatives.

Define product security response and communication processes.

Your background:

Bachelor's or Master's degree in Computer Science, Engineering, Cybersecurity, or a related discipline.

12+ years in software engineering, product security, or security architecture.

5+ years leading product security strategy for enterprise software products.

Experience securing large-scale commercial software platforms.

Proven success influencing engineering organizations and executive stakeholders.

Technologies

C/C++, Java, JavaScript, and Python

Linux/Unix and Windows Server

Databases, REST APIs, and microservices architecture

Preferred Qualifications

Experience with OpenEdge architecture, ABL, PASOE, OpenEdge Database, SQL, DevOps tooling, and enterprise middleware.

Experience implementing AI/ML security controls and securing agentic AI systems.

Experience supporting customer security reviews and enterprise compliance requests.

Leadership Competencies

Strategic thinking and technical leadership

Influencing without authority

Executive communication

Risk-based decision-making

Cross-functional collaboration

Mentoring and coaching

Customer-centric mindset

Ideal Candidate Profile

A highly respected OpenEdge technical expert who combines deep platform knowledge with modern product security, DevSecOps, architecture governance, and executive-level leadership capabilities, acting as the security equivalent of a chief architect for the product.

If this sounds like you and fits your experience and career goals, we’d be happy to chat. What we offer in return is the opportunity to experience a great company culture with wonderful colleagues to learn from and collaborate with, and also to enjoy:

Competitive remuneration package

Employee Stock Purchase Plan Enrolment

Vacation, Family, and Health

30 days of earned leave

An extra day off for your birthday

Various other leaves like marriage leave, casual leave, maternity leave, and paternity leave

Premium Group Medical Insurance for employees and five dependents, personal accident insurance coverage, and life insurance coverage

Professional development reimbursement

Interest subsidy on loans - either vehicle or personal loans.