IO / OT Solution Architect

Position Overview

The Network Infrastructure Lead (Senior Manager) is responsible to work with VP, IT (Service Operations - N2) to drive the architectural vision, platform strategy, and transformational change across the ST Engineering’s Engineering and Development environment. Serving as a senior technical authority and change lead, this role oversees the strategic design, continuous improvement, and governance of four core domains: DevSecOps, cloud platforms such as Amazon Web Services (AWS), Physical Networks, and OT / IoT platforms for ST Engineering Group in Singapore and overseas.

The role acts as a critical bridge between architecture, business operations, and day-to-day IT execution. By leading platform modernization and architectural change, this individual ensures that Engineering and Development systems are scalable, secure, highly available, and aligned with broader Group IT standards and target operating models.

Key Responsibilities

Platform Architecture & Governance

• Define, maintain, and govern the target-state architecture for Engineering and Development platforms across DevSecOps, cloud platforms such as AWS, networking, and OT / IoT environments.

• Ensure all new platforms, tools, and integrations comply with enterprise policies, security standards, and architectural blueprints.
• Lead architectural reviews and provide technical design approvals for projects impacting the Engineering and Development environment.
• Collaborate with Group IT architects to ensure local Engineering and Development environment’s architectures align with global enterprise strategies.

Change Leadership & Transformation

• Act as the change lead for technology transformations within Engineering and Development platform and environment, championing the adoption of modern platform engineering and AI enabled automated workflows.
• Drive a cultural shift toward a "security-by-design" and "automation-first" mindset across project teams and IT operations.
• Manage stakeholder expectations and guide business project owners through complex technology transitions.
• Develop roadmaps for legacy system modernization and transition to target architectural states.

DevSecOps Strategy & Implementation

• Lead the architectural design and adoption of DevSecOps practices for platforms.
• Ensure the seamless integration of automated security controls like code scanning within continuous integration and continuous deployment (CI/CD) pipelines.
• Standardize tooling and deployment architectures to accelerate time-to-market while strictly maintaining security and compliance.

Physical Networks Architecture & Oversight

• Oversee the architectural design, lifecycle, governance, security, cost optimization, and resiliency of the environment’s public cloud platforms, including AWS, server infrastructure, and physical networks (LAN, WAN, wireless, and third-party cloud and data centre connectivity).

• Drive network modernization initiatives, ensuring highly available, scalable, and secure connectivity.
• Ensure robust network segmentation and zoning, particularly concerning the boundaries between enterprise IT and operational technology (OT) environments.
• Lead a team of engineers and project teams to onboard projects onto the harmonized platform’s secure landing zone

OT / IoT Platform Integration

• Lead the platform strategy for OT / IoT environments, ensuring industrial assets and IoT devices are securely integrated with the broader IT ecosystem.
• Partner with OT / IoT Engineers and project teams to onboard projects onto the harmonized platform and/or align architecture and setup
• Establish architectural guardrails for industrial control systems (ICS) to minimize cyber risk.

Support to VP, IT (Service Operations - N2)

As a Strategic & Delivery Lead

• Support the VP together with N2 Leads in strategic technology planning, budgeting, and roadmap development for the N2 environment.
• Provide regular executive-level reporting on transformation progress, platform and governance health and risks and transformation progress.
• Act as an escalation point and liaison for critical vendor relationships, ensuring third-party solutions meet SLA and architectural requirements.
• Collaborate with IT Business Partners to ensure technology investments directly support business goals.

• Ensure Business Areas (BAs) smoothly onboard into GISO approved harmonized platform architectures without disrupting service operations.
• Guide project teams in evaluating and selecting appropriate vendor tools and technologies.

Technical & Domain Knowledge

• Architecture Frameworks: Familiarity with enterprise architecture frameworks (e.g., TOGAF, Zachman) and cloud/infrastructure design patterns.

• Cloud Platforms: Strong knowledge of AWS and comparable public cloud platforms, including landing zones, identity and access management, networking, compute, storage, containers, observability, security controls, resilience, cost management, and hybrid-cloud integration.

• Networking: Strong architectural knowledge of physical networks (routing, switching, firewalls), network segmentation, and zero-trust network access (ZTNA) principles.
• OT / IoT: Proven experience with IT/OT convergence, industrial network protocols, SCADA, PLCs, and securing cyber-physical systems.
• DevSecOps & Automation: Good understanding of CI/CD pipelines, containerization (Docker, Kubernetes), Infrastructure as Code (Terraform, Ansible), and integrating automated security testing.

Governance & Stakeholder Skills

• Change Management: Proven ability to lead technological change, influence cross-functional teams, and drive adoption of new standards.
• Stakeholder Alignment: Experience working closely with business project owners, IT operations, and external vendors to deliver cohesive solutions.
• Communication: Exceptional documentation, coordination, and presentation skills; ability to translate complex architectural and engineering concepts into business terms for non-technical leadership.
• Risk Management: Strong capability in identifying architectural risks and defining pragmatic mitigation strategies.

Professional Certifications (Highly Preferred)

• Architecture: TOGAF or equivalent enterprise architecture certification.
• Security/Cloud: CISSP, CISM, or advanced cloud architecture certifications (AWS/Azure/GCP).
• Networking/Service Management: ITIL v4, CCNP, or equivalent.