Responsibilities
End-to-End Infrastructure Architecture
- Server & Cloud Design: Work with partners to design server architectures (on-prem, cloud, and edge) to support projects. Ensure that design and architecture is fit-for-purpose – i.e. low-latency IOT, OT data processing.
- Network Strategy: Architect secure network topologies, focusing on IT/OT segmentation, firewall placement (DMZ), and secure remote access for vendors and internal teams.
- Integration: Ensure fit-for-purpose connectivity between diverse and disparate environments and ensure required segregation with enterprise IT systems.
- Future proof: Design and implement that the next generation architecture for AI and GPUs
DevSecOps & Automation Leadership
- CI/CD Pipeline Design: Govern and own the implementation of DevSecOps practices within the environment, ensuring that security scanning and compliance checks are automated.
- Infrastructure as Code (IaC): Develop and maintain IaC templates (e.g., Terraform, Ansible) to standardize the deployment of server and network environments.
- Vulnerability Management: Design automated processes for patching and updating OT/IoT devices and server infrastructure without disrupting mission-critical operations.
OT / IoT Strategy & Converged Governance
- Reference Architectures: Develop and maintain the Master Reference Architecture for OT/IoT environments.
- Asset Lifecycle Design: Create frameworks for secure device onboarding, provisioning, and decommissioning.
- Technology Selection: Evaluate and select IoT gateways, industrial PCs, and edge computing hardware that align with performance and security standards.
Technical Leadership & Stakeholder Management
- Advisory: Act as the primary technical advisor to projects (Cloud and Edge), OT / IoT Lead and Business Project Owners.
- Vendor Management: Review and approve vendor technical designs to ensure they meet the Group's architectural standards.
- Mentorship: Provide technical guidance to the Systems Engineers in the Platform and Service Operations teams.
AI & GPU Acceleration Strategy
- Edge AI Deployment: Architect and design the architecture to enable the deployment of AI-driven analytics and GPU-accelerated workloads across the platform. This includes designing a framework and infrastructure to allow Edge AI for real-time computer vision, anomaly detection, and predictive maintenance within OT environments and the Resource Orchestration.
- GPU as a Service : Evaluate and manage GPU as a Service for the organization to ensure the ecosystem can support the AI development that the organization is undertaking.
Requirements
- 8+ years of experience in IT infrastructure/system engineering.
- 5+ years in a Solution Architect role, specifically dealing with converged cloud and edge solutions, preferably experience in IT/OT environments or IoT deployments.
- Work with a team of systems engineers to design, implement and operate enterprise platforms.
- Certifications (Highly Desired):
- Architecture: AWS Solutions Architect Professional or TOGAF.
- Cybersecurity: CISSP, GICSP (Global Industrial Cybersecurity Professional).
- Infrastructure: CCNP/CCIE (Security or Enterprise) or equivalent.
Technical & Domain Knowledge
- Server & Virtualization : Advanced knowledge of AWS Cloud, Windows/Linux Server, VMware/Proxmox, and containerization (Docker, Kubernetes).
- Networking : Advanced knowledge of L2/L3 switching, SD-WAN, VPNs, and Network Access Control (NAC).
- DevSecOps : Good understanding in Jenkins/GitLab CI, Terraform, Ansible, and automated security tools (SAST/DAST).
- OT / IoT : Deep understanding of the Purdue Model, SCADA, PLC integration, and Industrial IoT protocols (MQTT, LoRaWAN).
- Cybersecurity : Good understanding of IT and OT cybersecurity standards, requirements, governance and compliance