IT/OT Systems Engineer

Hitachi; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

Hitachi Rail Singapore Pte. Ltd. is seeking an experienced IT/OT Systems Engineer to design, integrate, and secure technology systems used across the railway environment.

You will bridge IT and OT, supporting control centres, stations, depots, and trackside infrastructure while ensuring safety, resilience, and operational continuity. You will work with multidisciplinary teams on cybersecurity, testing, commissioning, and operation, contributing to secure, available railway operations and

Qualifications

• Bachelor’s degree or equivalent qualification in Computer Engineering, Computer Science, Information Technology, Electrical or Electronic Engineering, Telecommunications, Control and Automation, Systems Engineering, Railway Engineering, Cybersecurity, or a related discipline.
• Typically five or more years of relevant professional experience in railway transportation, critical infrastructure, industrial automation, utilities, aviation, defence, or another high-availability environment.

Responsibilities

• Design cybersecured, resilient IT/OT architectures for railway operational environments.
• Develop network diagrams, system architectures, data-flow diagrams, interface specifications, IP addressing plans, and firewall communication matrices.
• Integrate railway applications with servers, networks, storage, virtualisation, identity services, monitoring platforms, and cybersecurity solutions.
• Support systems such as operational and backup control centres, SCADA and station management systems, signalling and train-control interfaces; passenger info and safety systems.
• Review supplier designs and ensure technical solutions meet operational, cybersecurity, availability, and maintainability requirements.
• Configure, administer, and troubleshoot routers, switches, firewalls, VPN gateways, servers, storage, and virtualisation platforms.
• Establish secure network segmentation and demilitarised zones; implement secure remote maintenance and access controls.
• Support Windows and Linux platforms, directory services, backups, monitoring, and centralised logging.
• Engineer redundancy, fault tolerance, disaster recovery and failover capabilities.

Skills

IT/OT integration

Cybersecurity

Network engineering

System integration

Windows Server

Linux

SCADA

Education

Bachelor's degree or equivalent in Computer Engineering / Computer Science / IT / Electrical or Electronic Engineering / Telecommunications / Control and Automation / Systems Engineering / Railway Engineering / Cybersecurity

Tools

VMware

Firewall configuration

Job description

Location:

Singapore, Central Singapore, Singapore

Job ID:

R0139382

Date Posted:

2026-07-31

Company Name:

Hitachi Rail Singapore Pte. Ltd.,

Profession (Job Category):

IT, Telecom & Internet

Job Schedule:

Full time

Remote:

No

About Us

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

Job Description

AsHitachi Rail Singapore, we are advancing rail signalling and safety solutions to ensure safe and efficient railway operations worldwide.

Our technologies help to bring billions of people reliably to their destinations by rail every year – making sustainable mobility a reality.

IT/OT Systems Engineer (Ref.No. R0139382)

at our location in Singapore

We are looking for an experienced IT/OT Systems Engineer to support the design, integration, cybersecurity, testing, commissioning, and operation of technology systems used across our railway environment.

In this role, you will bridge traditional Information Technology and railway Operational Technology. You will work with multidisciplinary teams responsible for operational control centres, stations, depots, trackside infrastructure, telecommunications, signalling interfaces, SCADA, and supporting data-centre platforms.

You will help ensure that these systems remain secure, safe, resilient, available, and maintainable throughout their lifecycle. This is an opportunity to contribute to critical transportation infrastructure where sound engineering decisions have a direct impact on service continuity, operational performance, and passenger confidence.

You will enjoy having these responsibilities

IT/OT Engineering and Integration

• Design cybersecured, resilient IT/OT architectures for railway operational environments.
• Develop network diagrams, system architectures, data-flow diagrams, interface specifications, IP addressing plans, and firewall communication matrices.
• Integrate railway applications with servers, networks, storage, virtualisation, identity services, monitoring platforms, and cybersecurity solutions.
• Support systems such as:
  • Operational and backup control centres
  • SCADA and station management systems
  • Signalling and train-control interfaces
  • Passenger information and public-address systems
  • CCTV, access control, and physical-security platforms
  • Automatic fare collection and ticketing systems
  • Depot and maintenance-management systems
  • Railway telecommunications and radio networks
  • On-board and train-to-ground interfaces
• Review supplier designs and ensure technical solutions meet operational, cybersecurity, availability, and maintainability requirements.

Networks and Infrastructure

• Configure, administer, and troubleshoot routers, switches, firewalls, VPN gateways, servers, storage, and virtualisation platforms.
• Implement secure network segmentation between enterprise IT, operational systems, safety-critical environments, suppliers, and passenger-facing services.
• Establish demilitarised zones, secure jump hosts, access-control lists, role-based access, and controlled remote-maintenance solutions.
• Support Windows and Linux platforms, directory services, certificate services, backups, monitoring systems, and centralised logging.
• Engineer solutions with appropriate redundancy, fault tolerance, disaster recovery, and failover capabilities.

OT Cybersecurity

• Conduct or support cybersecurity threat, vulnerability, and risk assessments for railway systems.
• Identify critical assets, trust boundaries, system dependencies, potential attack paths, and operational or safety consequences.
• Translate risk assessments into practical and verifiable security requirements.
• Apply defence-in-depth and zones-and-conduits principles to railway IT/OT architectures.
• Develop and maintain secure configuration and system-hardening standards.
• Implement and improve:
  • Least-privilege access
  • Multifactor authentication
  • Privileged-access management
  • Secure vendor remote access
  • Network security monitoring
  • Endpoint protection and application allow-listing
  • Vulnerability and patch management
  • Removable-media controls
  • Security logging and alerting
• Develop compensating controls where conventional IT security measures cannot safely or operationally be applied to legacy OT systems.
• Support incident response, recovery exercises, forensic readiness, and post-incident reviews.

Testing, Commissioning, and Operations

• Help prepare Factory Acceptance Tests, Site Acceptance Tests, System Integration Tests, cybersecurity tests, and operational readiness assessments.
• Verify system hardening, firewall rules, user access, logging, backups, system recovery, resilience, and network segregation.
• Support installation and commissioning in laboratories, control centres, stations, depots, trackside locations, and equipment rooms.
• Investigate incidents using system logs, packet captures, monitoring tools, alarms, and root-cause analysis techniques.
• Provide Level 2 or Level 3 technical support for assigned systems.
• Plan upgrades, security remediation, technology refreshes, and end-of-life replacements while minimising disruption to railway operations.
• Maintain accurate asset inventories, configuration baselines, test evidence, operating procedures, and technical records.
• Prepare change requests, impact assessments, implementation plans, rollback procedures, and validation reports.

You have

Qualifications and Experience

• Bachelor’s degree or equivalent qualification in Computer Engineering, Computer Science, Information Technology, Electrical or Electronic Engineering, Telecommunications, Control and Automation, Systems Engineering, Railway Engineering, Cybersecurity, or a related discipline.
• Typically five or more years of relevant professional experience in railway transportation, critical infrastructure, industrial automation, utilities, aviation, defence, or another high-availability environment.
• Practical experience in IT/OT integration, network engineering, infrastructure engineering, system integration, cybersecurity, or operational support.
• Experience working with suppliers, system integrators, internal engineering teams, and operational stakeholders.
• Experience producing clear, auditable engineering documentation.
• Familiarity with formal change, configuration, incident, problem, and risk-management processes.
• Railway or public-transport experience is strongly preferred.

Technical Knowledge

You should have strong knowledge in several of the following areas:

• TCP/IP, VLANs, switching, routing, multicast, VPNs, and network segmentation
• Enterprise or industrial firewalls and secure remote-access solutions
• Windows Server and Linux administration
• Active Directory, LDAP, RADIUS, or equivalent identity technologies
• VMware, Hyper-V, or comparable virtualisation platforms
• Storage, backup, restoration, and disaster recovery
• Public key infrastructure, certificates, and encryption
• Centralised logging, infrastructure monitoring, and network management
• Industrial control systems, SCADA, human-machine interfaces, and engineering workstations
• OT vulnerability management, secure configuration, and compensating controls
• Packet capture, event correlation, and systems troubleshooting
• High-availability and geographically resilient system architectures

Knowledge of railway systems—such as signalling, CBTC, ETCS/ERTMS, station systems, traction-power SCADA, telecommunications, rolling stock, or operational control centres—would be an advantage.

Standards and Frameworks

Working knowledge of one or more of the following is highly desirable:

• CLC/TS 50701 – Railway applications cybersecurity
• IEC 62443 series – Industrial automation and control-system security
• EN 50126 / IEC 62278 – Railway RAMS lifecycle
• EN 50128 / IEC 62279 – Railway control and protection software
• EN 50129 / IEC 62425 – Safety-related signalling systems
• EN 50159 – Safety-related railway communications
• ISO/IEC 27001 and ISO/IEC 27002
• NIST Cybersecurity Framework and NIST SP 800-82
• CIS Controls and CIS Benchmarks
• Applicable national cybersecurity, critical-infrastructure, and data-protection requirements

Preferred Certifications

One or more of the following certifications would be advantageous:

• ISA/IEC 62443 Cybersecurity Certificate Program
• Global Industrial Cyber Security Professional – GICSP
• Certified Information Systems Security Professional – CISSP
• Certified Information Security Manager – CISM
• Certified in Risk and Information Systems Control – CRISC
• GIAC Response and Industrial Defense – GRID
• GIAC Critical Infrastructure Protection – GCIP
• Cisco CCNA, CCNP Enterprise, or CCNP Security
• Relevant Fortinet, Palo Alto Networks, or equivalent security certification
• Microsoft, VMware, Red Hat, or Linux Foundation certification
• TÜV Functional Safety or railway RAMS qualification
• CLC/TS 50701, EN 50126, EN 50128, or EN 50129 training