Principal Product Manager
About the job
- 10+ years of product management experience, with a strong track record owning revenue-generating digital products.
- 3–5+ years of direct eCommerce, self-serve, or product-led growth experience in a B2B SaaS or hybrid SaaS and on-premises environment.
- Ability to define and execute product strategy at the principal or senior staff level, set vision, influence roadmaps across teams, and drive major product decisions.
- Deep understanding of eCommerce fundamentals, including checkout user experience, payment infrastructure, pricing and packaging strategy, subscription lifecycle, and conversion optimization.
- Strong analytical skills, including funnel metrics, A/B test design, cohort analysis, and presenting performance data to executive stakeholders.
- Demonstrated ability to lead through influence in a matrixed organization and build alignment across Product, Engineering, Go-to-Market, Finance, and Legal.
- Experience with pricing and packaging strategy, including modeling and presenting trade-offs across tiers, bundles, and go-to-market motions.
- Experience mentoring other product managers and contributing to team-level craft and practices.
- Define and own the multi-year product vision and roadmap for eCommerce capabilities, aligned with company revenue and growth objectives.
- Set the strategic framework for online sales across SMB self-serve, mid-market, and enterprise digital motions.
- Influence pricing, packaging, and go-to-market strategy in partnership with Product, Finance, and Go-to-Market leadership.
- Represent eCommerce at the executive level and translate product decisions into clear business-impact narratives.
- Own the self-serve buying journey from trial activation through paid conversion and upsell, building experiences that drive revenue without requiring a sales touch.
- Define and optimize in-product upgrade and expansion paths that accelerate product-led growth.
- Partner with Product and Engineering to build in-app purchasing and entitlement infrastructure for self-serve revenue.
- Measure and improve product-led growth metrics, including trial conversion rate, time-to-value, activation rate, and self-serve ARR.
- Own the end-to-end checkout experience, including product catalogue, pricing pages, cart, payment, order confirmation, and post-purchase flows.
- Drive pricing and packaging display strategy to surface the right offer to the right buyer at the right moment.
- Partner with Finance and Legal on payment method expansion, tax and compliance requirements, and currency localization.
- Lead major platform investments, including commerce engine selection, payment infrastructure, and subscription management tooling.
- Build and maintain a data-driven operating model for eCommerce performance, with clear KPIs and a test-and-learn culture.
- Own funnel analytics covering traffic-to-trial, trial-to-paid, cart abandonment, average order value, and lifetime value.
- Drive a structured A/B testing program across pricing pages, checkout flows, and upgrade prompts.
- Establish reporting and dashboards that give leadership visibility into digital revenue health.
- Coordinate across Product, Engineering, Marketing, Sales, Finance, and Customer Success on eCommerce.
- Drive alignment on roadmap priorities without direct authority.
- Mentor and elevate other product managers on eCommerce thinking, customer journey analysis, and conversion-first product design.
- Build playbooks, frameworks, and practices that scale the eCommerce function as the team grows.
About the company
SolarWinds provides IT management and observability software that helps organizations oversee their technology infrastructure. Its platform gathers performance and configuration data from devices, applications, and services and presents dashboards, alerts, and automated workflows to detect and resolve issues across on-premises, cloud, and hybrid environments. It stands out by offering a single, scalable ecosystem that covers network, systems, databases, applications, and IT service management, supported by a broad partner network and a history of strategic acquisitions. The company aims to help IT teams and MSPs prevent outages, optimize performance, and maintain security and compliance in diverse environments.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Austin, Texas
Founded
1999
Get referred to SolarWinds
See people who can refer or advise you
Simplify's Take
What believers are saying
- SolarWinds launched SW1 on April 15, 2026, pushing agentic AI into IT automation.
- Gartner recognized SolarWinds in observability on July 15, 2026, validating product relevance.
- August 26, 2026 leadership changes brought Samuel Monti and Cullen Childress for execution.
What critics are saying
- September 22, 2026 Observability Self-Hosted flaws enabled unauthenticated RCE on exposed servers.
- September 17, 2026 Access Rights Manager CVE-2026-28326 added another unauthenticated RCE.
- Fitch warned February 25, 2026 leverage and churn could trigger default, reviving SUNBURST distrust.
What makes SolarWinds unique
- SolarWinds serves 300,000 customers across hybrid infrastructure and IT operations.
- Turn/River's April 2025 $4.4 billion take-private gives SolarWinds room to retool.
- Its 2026 partner program deepens MSP distribution across Africa and other regions.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Health Insurance
Paid Vacation
Paid Holidays
Remote Work Options
Flexible Work Hours
Wellness Program
Mental Health Support
Phone/Internet Stipend
Home Office Stipend
Growth & Insights and Company News
6 month growth
0%1 year growth
0%2 year growth
0%CyberKnight strengthens zero trust ecosystem at GISEC Global 2026 with dual industry awards and more. CyberKnight Technologies concluded a landmark three days at GISEC Global 2026 at Expo City Dubai. The company brought 16 technology vendors together under one integrated Zero Trust strategy, signed strategic MOUs with Harness and Asimily, launched the region's first Women in Cybersecurity series, received an official award from Dr. Mohamed Al Kuwaiti, Head of Cybersecurity for the UAE Government, and celebrated its ecosystem with an exclusive Gala Dinner. The stand at GISEC was among the most distinctive at the event, featuring dedicated zones across five security pillars: * AI driven SOC automation and threat detection (CrowdStrike, Swimlane, NetWitness, Group-IB) * Data protection and quantum readiness (Certes Networks) * Operational cyber resilience (Rezilens, Immersive, CounterCraft) * Identity security and Zero Trust access (Netwrix, Appgate) * Application security, OT, IoT and cyber physical resilience (Harness, Invicti, Xage Security, Forescout, Asimily, SolarWinds). "Our role is not simply to put more cybersecurity products into the market. Security teams already have enough technology to manage. The real challenge is making those technologies work together so customers can move from identifying a risk to governing it, containing it, and recovering from it. That is where our Zero Trust approach helps customers operationalise resilience, not just buy more tools", Wael Jaber, Chief Strategy Officer, CyberKnight Technologies. Two strategic distribution agreements were formalised on the show floor. The first expanded CyberKnight's DevSecOps and application security portfolio through a partnership with Harness, following Harness's acquisition of Traceable. The second, an MOU with Asimily, strengthened the company's cyber asset and exposure management capabilities across IT, IoT, OT, and IoMT environments. CyberKnight entered GISEC with recognition from two key partners. CrowdStrike presented its Aspiring Star Award in acknowledgment of rapid regional growth and expanding Falcon platform adoption, while Group-IB named the company Distributor of the Year 2025 META for outstanding performance across enterprise and government customers. Together the two awards reflect the confidence the vendor community places in CyberKnight's ability to grow markets and build ecosystems across the Middle East and Africa. On the community front, the company launched its Women in Cybersecurity series at GISEC - a long term initiative bringing together senior women leaders from across the vendor ecosystem to advance diversity, mentorship, and leadership in the region's cybersecurity industry. Separately, CyberKnight received an official participation award presented by Dr. Mohamed Al Kuwaiti, Head of Cybersecurity for the UAE Government, accepted by Avinash Advani, Founder and CEO, and Swapna Nair, Director of Marketing. "GISEC 2026 was a defining moment for CyberKnight. The partnerships we announced, the recognition we received, and the community we brought together reflect the trust our ecosystem places in us. We leave more committed than ever to delivering world class cybersecurity capabilities to the Middle East and Africa", Swapna Nair, Director Marketing, CyberKnight Technologies. CyberKnight concluded its participation with an exclusive Gala Dinner bringing together customers, partners, and industry leaders from across the region. Two of its strategic vendors were recognised with top honours, with CrowdStrike receiving the Vendor of the Year award and SolarWinds being named Revenue Growth Champion. Image Credit: CyberKnight
Critical SolarWinds flaws let attackers remotely execute code on observability servers. SolarWinds released Observability Self-Hosted 2026.2.3 to fix two serious vulnerabilities that could let unauthenticated attackers remotely execute code on affected observability servers. The flaws, tracked as CVE-2026-28324 and CVE-2026-28325, affect specific non-default configurations and communication modes. The update was released on September 22, 2026, and is especially important for organizations running SolarWinds Observability Self-Hosted in environments with Web Performance Monitor, or WPM, players. Successful exploitation could let a remote attacker run arbitrary commands on a vulnerable server without logging in first. CVE-2026-28324 is rated 9.8 out of 10 on the CVSS severity scale, making it a critical issue. SolarWinds said the vulnerability stems from insufficient integrity checks in Observability Self-Hosted installations configured in a non-default, non-secure manner. SolarWinds flaws execute code. The advisory does not provide public proof-of-concept details. However, the high severity score indicates that defenders should treat exposed and specially configured servers as high-priority patching targets. The second flaw, CVE-2026-28325, has a CVSS score of 8.8 and is also classified as an unauthenticated remote code execution issue. According to SolarWinds, it stems from deserializing untrusted data when the application uses a specific communication mode. Unsafe deserialization occurs when software accepts attacker-controlled serialized data and processes it without proper validation, potentially allowing malicious objects or commands to run in the application context. Kai Huang of Armadin responsibly reported both vulnerabilities. SolarWinds said the issues are resolved in version 2026.2.3, which adds no new product features but includes security fixes and platform reliability improvements. The release also changes the behavior of certain WPM player deployments. After the upgrade, passive WPM players installed by default on the main polling engine are switched from server-initiated to player-initiated communication. Remote passive WPM players are automatically assigned randomly generated strong passwords during their upgrade. However, SolarWinds noted that players with the Enable Upgrade option disabled are not upgraded automatically and require administrator attention. Active, player-initiated WPM players do not require a password after the upgrade. Administrators should upgrade their entire SolarWinds deployment through Settings > My Deployment, which updates SolarWinds Platform products and related scalability engines. Before applying the update, security teams should identify all main polling engines, remote WPM players, and communication modes in use. They should also verify that passive remote players have strong credentials and that systems excluded from automatic upgrades are updated manually. Organizations should review server exposure, restrict management access to trusted networks, monitor SolarWinds application and Windows logs for unexpected process execution, and investigate abnormal activity involving polling engines or WPM players. Older deployments deserve particular attention: SolarWinds has ended engineering support for Observability Self-Hosted 2024.2 and earlier versions, meaning they no longer receive regular fixes or service releases. Cut every SOC alert investigation by 21 min. Power your SOC with instant IOC context for immediate response: Integrate TI Lookup in your SOC The post critical SolarWinds flaws let attackers remotely execute code on observability servers appeared first on cyber security News. Related cyber security News posts. SolarWinds has released security patches addressing three critical remote code execution vulnerabilities in Serv-U that could allow attackers with administrative privileges to execute arbitrary code on affected systems. The vulnerabilities disclosed in Serv-U version 15.5.3 pose significant risks to organizations that rely on the file transfer software for secure data... In "Cybersecurity News - Original News Source is cybersecuritynews.com" IT and security administrators can utilize SolarWinds Access Rights Manager (ARM) to efficiently manage and audit user access rights to data, systems, and files. The software provides an easy-to-use interface for provisioning, de-provisioning, and overseeing access, which helps safeguard organizations from potential data loss and breaches. Access Rights Manager 2023.2... In "Cybersecurity News - Original News Source is cybersecuritynews.com" CISA Warns SolarWinds Web Help Desk Vulnerability An urgent warning regarding a critical remote code execution (RCE) vulnerability in SolarWinds Web Help Desk. The vulnerability, tracked as CVE-2025-40551, exploits unsafe deserialization of untrusted data and could allow attackers to execute arbitrary commands on affected systems without requiring authentication. CVE-2025-40551 is... In "Cybersecurity News - Original News Source is cybersecuritynews.com"
SolarWinds patches ARM hard-coded key flaw enabling unauthenticated RCE. Byadmblake September 19, 2026 SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and... SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior. "SolarWinds
Critical ArangoDB bugs expose entire databases and enable remote code execution as root. 2026-09-09 14:09 Two critical ArangoDB vulnerabilities can allow unauthenticated attackers to access protected database APIs and, after obtaining valid database access, escalate to root-level code execution on affected hosts. Security researchers reported the vulnerabilities to ArangoDB on August 23, 2026. Patches shipped on August 31, followed by GitHub Security Advisories published on September 6: GHSA-rrgq-978q-36mq for the [...] Read the original article: PostgreSQL has released critical security updates addressing multiple high-impact vulnerabilities that could allow remote code execution (RCE), SQL injection, and denial-of-service (DoS) attacks across widely deployed database environments. The PostgreSQL Global Development Group announced the release of versions 18.4, 17.10, 16.14, 15.18, and 14.23, fixing 11 security flaws and more... May 19, 2026 SolarWinds has released Serv-U 2026.3, which includes fixes for a cluster of 9.1 CVSS critical vulnerabilities that allow remote code execution (RCE) and privilege escalation up to root on Unix-like systems. This update significantly strengthens the managed file transfer (MFT) and FTP server platform against potential takeovers. While Windows instances... July 22, 2026 Microsoft has addressed three critical security flaws in its Office suite, including two vulnerabilities rated Critical and one Important, all enabling remote code execution (RCE) via use-after-free memory corruption weaknesses. These vulnerabilities, disclosed between March and May 2025, expose systems to attacks where malicious actors could execute arbitrary code by... May 14, 2025
CDK names new CEO. September 3, 2026 CDK Global has named Sudhakar Ramakrishna President and CEO, effective Oct. 5, as the automotive retail software provider undergoes a leadership transition following several years of investment in its technology platform. Ramakrishna will also join CDK's board of directors, according to an Aug. 27 company announcement. He succeeds Brian MacDonald, who is retiring and will become a senior strategic advisor to Brookfield and CDK during the transition. The change puts an experienced technology executive at the helm of a company whose software is embedded in dealership operations, as CDK increasingly focuses on artificial intelligence, analytics and customer insights. Ramakrishna most recently served as President and CEO of SolarWinds, an infrastructure management software company. He previously led Pulse Secure and held senior positions at Citrix, Polycom, Motorola, 3Com and U.S. Robotics. His experience spans cloud technology, mobility, networking, security and collaboration. "We are grateful to Brian for his leadership and the lasting impact he has had on CDK. He returned to the company at an important moment and led a multi-year transformation that strengthened CDK's strategy, product roadmap and financial foundation," said Doug Bayerd, Managing Partner in Brookfield's Private Equity Group and a CDK director. CDK said it has invested more than $500 million over several years to develop its platform from a system of record into what it describes as a system of intelligence and engagement. The company said its automotive-specific data includes 257 million unique customer IDs representing most U.S. consumers and vehicles on its platform, providing a foundation for AI, analytics and customer insights. "CDK has the people, scale, expertise and product depth to help customers get more from the solutions they rely on to operate their businesses," said Ramakrishna. "Our opportunity is to deliver more customer value and success through innovation, disciplined execution and reliable delivery."