Technical Solution Architect - ThingWorx / SCPA

Job description

Job Details • Job Title: Technical Solution Architect ThingWorx / SCPA • Platform: ThingWorx 10.x • Product Focus: Smart Connected Product Accelerator (SCPA) / SmartConnect • Engagement Type: Solution Architecture, Design Delivery • Experience: 8+ Years overall, including 5+ years of ThingWorx experience • Location: Bangalore Position Summary We are seeking an experienced Technical Solution Architect ThingWorx / SCPA to lead the architecture and solution design of the next-generation SmartConnect connected-product platform using ThingWorx 10.x and Smart Connected Product Accelerator (SCPA). The architect will translate approved business requirements, user needs, and acceptance criteria into a secure, scalable, resilient, supportable, and maintainable technical solution. The role will provide technical direction across remote service access, endpoint automation, identity and access governance, enterprise integrations, master-data synchronization, and multiple user populations. The ideal candidate will bring deep hands-on expertise in ThingWorx architecture and development, combined with strong knowledge of SCPA building blocks, IoT solution architecture, security, identity management, enterprise integration, and remote-access solutions. A key objective of this role is to maximize the use of standard SCPA configuration and reusable building blocks, minimize unnecessary customization, and establish governed, upgrade-safe extension patterns where custom development is required. Key Responsibilities Solution Architecture Technical Leadership • Own the end-to-end solution architecture for SmartConnect using ThingWorx 10.x and SCPA. • Define application, data, integration, security, deployment, infrastructure, and operational architecture. • Translate business requirements and Given/When/Then acceptance criteria into traceable technical requirements, architecture decisions, and implementation guidance. • Evaluate requirements against SCPA capabilities and determine the appropriate configure, integrate, extend, or custom-build approach. • Develop and maintain architecture diagrams, solution documentation, technical standards, and Architecture Decision Records (ADRs). • Establish implementation guardrails and reusable architectural patterns for development teams. ThingWorx SCPA Architecture • Design the overall ThingWorx Thing model and asset hierarchy. • Define and govern: • Thing Templates • Thing Shapes • Data Shapes • Services • Events • Subscriptions • Persistence strategies • Mashups and application components • Assess and leverage SCPA standard capabilities, reusable building blocks, extension points, and custom components. • Ensure custom extensions are maintainable, testable, reusable, and designed to minimize future upgrade impact. Remote Access Endpoint Management • Architect secure attended and unattended remote-access solutions for gateways and downstream endpoints. • Define architecture for session routing, customer/user consent, endpoint availability, failure handling, auditability, clipboard access, and file transfer. • Design secure gateway-to-endpoint communication and access patterns. • Ensure remote-access capabilities comply with enterprise cybersecurity and least-privilege requirements. Automation Remote Package Execution • Design automated file-watch ingestion and processing capabilities. • Define targeted remote-package execution architecture, including: • Endpoint targeting • Integrity/checksum validation • Retry and failure-management policies • Execution status • Per-endpoint results • Audit records • Monitoring and observability • Establish scalable automation patterns for managing distributed endpoints and connected assets. Security, Identity Access Governance • Define Role-Based Access Control (RBAC) and least-privilege security architecture. • Design static and dynamic visibility groups and segmented access models. • Architect Just-In-Time (JIT) privileged-access approval workflows, including customer-owned approval processes. • Define identity and authorization models supporting: • Customers • Internal employees • External contractors • Business partners • Design identity federation and authentication patterns using enterprise identity platforms. • Ensure security controls, authorization decisions, privileged access, and user activity are appropriately auditable. Enterprise Integration Master Data • Define integration architecture between ThingWorx/SmartConnect and Unity (Salesforce) for endpoint master data. • Establish system-of-record ownership and read-only data-field principles. • Design synchronization, reconciliation, error handling, retry, and recovery mechanisms. • Provide visibility into synchronization status and last-successful-sync information. • Establish standards for REST APIs, events, data contracts, and integration patterns across enterprise systems. • Support integrations with IAM/IdP platforms, Salesforce, CMDB, SAP, logging, monitoring, and other enterprise applications. Non-Functional Architecture Define and govern non-functional requirements covering: • Availability and high availability • Performance • Scalability • Resiliency and recovery • Security and privacy • Observability and monitoring • Auditability • Maintainability • Supportability • Deployment and release