Technology Architect

PT Chandra Asri Pacific Tbk; Indonesia; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

PT Chandra Asri Pacific Tbk (Chandra Asri Group) seeks a Senior IT Architect to lead technology architecture and governance for Aster, ensuring cloud, infrastructure, applications, integration, and security align with business needs.

You will design Azure Landing Zone, manage security, IAM, and hybrid connectivity, work with SAP/integration, and drive IT process maturity through partnerships with internal teams and MSPs.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Engineering, or related field.

Responsibilities

• Own and maintain the IT Architecture Baseline covering cloud, network, applications, integration, and security.
• Define and enforce architecture principles, standards, and technology patterns.
• Lead architecture reviews for major technology changes, new applications, and vendor onboarding.
• Maintain an Architecture Decision Log for key technology decisions.
• Design and govern Azure environment, including Azure Landing Zone, network topology, policies, subscriptions, and resource management.
• Ensure appropriate cloud security, cost management, capacity planning, and scalability.
• Assess the Azure environment against Microsoft Cloud Adoption Framework and drive improvement actions.
• Provide architecture guidance for new Azure services and solutions.
• Work with infrastructure and security teams on Azure security, including Defender for Cloud, Azure Policy, network security, and hybrid connectivity.
• Maintain overview of application landscape and system integrations across SAP, non-SAP applications, Salesforce, middleware, and OT systems.
• Lead application portfolio reviews to identify duplication and consolidation opportunities.
• Define integration and API standards for new system-to-system connections.

Skills

Azure

Azure Landing Zone

Network architecture

Security architecture

Zero Trust

IAM/PIM/PAM

SIEM

Entra ID

ExpressRoute

VPN

SAP integration

IT/OT architecture

Stakeholder management

Technical documentation

Education

Bachelor's degree in IT/CS/Engineering

Tools

Microsoft Azure tooling

ExpressRoute

VPN

Job description

Chandra Asri Group, through its subsidiaryPT Chandra Asri Sentral Solusi (CASS), has established aShared Service Center (SSC)to enhance operational efficiency and support the business growth of its subsidiaries. From finance and HR to procurement, customer operations, and IT, our SSC is the backbone that keeps businesses running smoothly. One of our key areas of support is forAster Chemicals & Energy (ACE),a leading chemical and energy solutions provider in Singapore and the Asia Pacific. ACE combines the legacy of Singapore’s first oil refinery with cutting-edge petrochemical operations, jointly owned by Chandra Asri Group andGlencore, one of the world’s largest natural resource companies.

Job Purpose

Lead technology architecture and governance for Aster, ensuring that cloud, infrastructure, applications, integration, and security architecture are aligned with business needs, IT strategy, security requirements, and operational standards.

Key Responsibilities

• Own and maintain the overall IT Architecture Baseline covering cloud, network, applications, integration, and security.
• Define and enforce architecture principles, standards, and technology patterns.
• Lead architecture reviews for major technology changes, new applications, and vendor onboarding.
• Maintain an Architecture Decision Log for key technology decisions.
• Design and govern Aster's Microsoft Azure environment, including Azure Landing Zone, network topology, policies, subscriptions, and resource management.
• Ensure appropriate cloud security, cost management, capacity planning, and scalability.
• Assess the Azure environment against Microsoft Cloud Adoption Framework and drive improvement actions.
• Provide architecture guidance for new Azure services and solutions.
• Work with infrastructure and security teams on Azure security, including Defender for Cloud, Azure Policy, network security, and hybrid connectivity.
• Maintain an overview of the organization's application landscape and system integrations across SAP, non-SAP applications, Salesforce, middleware, and OT systems.
• Lead application portfolio reviews to identify duplication, outdated systems, and opportunities for consolidation.
• Define integration and API standards for new system-to-system connections.

4. Security Architecture

• Define and maintain security architecture based on Zero Trust and identity-centric security principles.
• Design IAM, PIM/PAM, network segmentation, endpoint security, and security monitoring architecture.
• Govern Microsoft Entra ID architecture, including hybrid identity, Conditional Access, and identity lifecycle management.
• Support SIEM architecture and integration with security and IT service management processes.
• Define and maintain clear security boundaries between IT and OT environments.

5. IT Service Lifecycle & Continuous Improvement

• Establish end-to-end IT service lifecycle processes covering hardware, software, user access, onboarding/offboarding, and service retirement.
• Ensure appropriate security and architecture assessment is incorporated into technology onboarding.
• Lead continuous improvement initiatives to strengthen IT processes, governance, and operational maturity.
• Work with internal teams and managed service partners to improve IT capabilities, processes, and service delivery.

Requirements

Education & Experience

• Bachelor's degree in Information Technology, Computer Science, Engineering, or related field.
• Minimum 12 years of experience in IT architecture, with a strong combination of solution architecture, infrastructure design, and hands‑on technology delivery.
• Proven experience in an architecture ownership or governance role.
• Strong hands‑on experience with Microsoft Azure, including Azure Landing Zone, network architecture, Azure Policy, Defender for Cloud, Entra ID, and hybrid connectivity such as ExpressRoute or VPN.
• Strong understanding of security architecture, including Zero Trust, IAM/PIM/PAM, SIEM, and endpoint security.
• Experience establishing or improving IT processes in organizations with developing IT maturity.
• Strong communication, stakeholder management, and technical documentation skills.
• Ability to explain complex technical decisions clearly to both technical teams and senior leadership.
• Experience with SAP and enterprise application integration.
• Experience in IT/OT architecture and industrial environments.

PT Chandra Asri Pacific Tbk (Chandra Asri Group) has been the backbone of strategic sectors in Indonesia since its establishment. We have transformed into a leading energy, chemical, and infrastructure solutions company in Southeast Asia to provide better services to our customers and stakeholders. As the sole operator of a Naphtha Cracker plant, Chandra Asri Group plays a central role in the petrochemical industry, which is essential for the production of everyday products and has been designated as a national vital object by the Indonesian government.

Chandra Asri Group continues to collaborate and innovate sustainably as a growth partner.

PT Chandra Asri Pacific Tbk (Chandra Asri Group) has been the backbone of strategic sectors in Indonesia since its establishment. We have transformed into a leading energy, chemical, and infrastructure solutions company in Southeast Asia to provide better services to our customers and stakeholders. As the sole operator of a Naphtha Cracker plant, Chandra Asri Group plays a central role in the petrochemical industry, which is essential for the production of everyday products and has been designated as a national vital object by the Indonesian government.

Chandra Asri Group continues to collaborate and innovate sustainably as a growth partner.