Lead AI Platform Network & Security Engineer

ITCAN PTE. LIMITED; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

ITCAN PTE. LIMITED is seeking an experienced Network Architecture Lead to design, implement and operate secure, scalable network and connectivity for the Central AI Platform hosted on RE:AI IaaS.

You will establish end-to-end connectivity across multi-cloud, on-premises systems, external SaaS platforms and API endpoints to enable enterprise AI use cases, while driving capacity planning, security, redundancy and performance optimization.

Qualifications

• Bachelor’s degree in Computer Engineering, Network Engineering, CS or related discipline.
• Professional networking certifications (e.g., CCNP/CCIE, AWS/Azure/GCP Networking Specialty).
• Security certifications (e.g., CISSP, CISM) are advantageous.
• 5–10 years of experience in enterprise networking, hybrid cloud connectivity or infrastructure architecture.

Responsibilities

• Lead design, implementation and operations of secure, scalable network architecture for Central AI Platform.
• Establish end-to-end connectivity across multi-cloud, on-prem, SaaS and API endpoints.
• Oversee capacity planning, redundancy design, performance optimization and lifecycle management.
• Coordinate with Cybersecurity, DevSecOps and Infrastructure teams on security and operations.

Skills

Systems thinking

Architectural mindset

Stakeholder management

Communication skills

Risk identification & mitigation

Education

Bachelor's degree in Computer Engineering / Network Engineering / CS or related

Certifications: CCNP/CCIE / AWS-Azure-GCP Networking Specialty

Security certifications: CISSP / CISM (advantageous)

Tools

OpenShift networking

Firewall configuration tools

Network monitoring & SIEM

Job description

Position Summary

• Lead the design, implementation and operations of secure, resilient and scalable network and connectivity architecture for Central AI Platform hosted on RE:AI IaaS.
• Establish and manage end-to-end connectivity across multi-cloud, on-premises systems, external SaaS platforms and API endpoints to enable enterprise AI use cases.
• Oversee network capacity planning, redundancy design, performance optimization and lifecycle management to support platform growth and commercialization.
• Ensure robust security architecture including firewall policies, segmentation, secure access controls and alignment withcybersecurity and DevSecOps standards.
• Serve as the primary technical authority for networking and security architecture of the AI platform, coordinating across RE:AI, Cloud, Cybersecurity, Infrastructure and Application teams.
• Enable a secure-by-design, scalable and high-availability network foundation to support enterprise-grade AI workloads and future expansion.

Make an Impact by:

• Designing and implementing hybrid connectivity architecture across RE:AI IaaS, public cloud platforms, on-prem environments and external partners for AIDA’s Central AI Platform.
• Defining network segmentation, routing, peering, VPN, Direct Connect/ExpressRoute and API gateway patterns to enable seamless AI workload connectivity.
• Ensuring high availability, fault tolerance and redundancy across critical AI platform components.
• Leading firewall design, configuration standards, access control models and network security zoning.
• Implementing secure connectivity patterns including Zero Trust principles, encryption in transit and privileged access controls.
• Coordinating with Cybersecurity and DevSecOps teams on vulnerability management, security monitoring and incident response.
• Overseeing setup and maintenance of physical connectivity (e.g., cross-connects, colocation, data center interconnects).
• Monitoring bandwidth utilization, latency, throughput and network health, and executing proactive capacity expansion.
• Establishing network operations procedures, change management controls and escalation processes.
• Overseeing troubleshooting of connectivity and security incidents across hybrid environments.
• Acting as the central coordination point across internal teams and external partners.

Skills for Success:

Qualifications & Certifications

• Bachelor’s degree in Computer Engineering, Network Engineering, Computer Science, Information Security or related discipline.
• Professional networking certifications (e.g., CCNP/CCIE, AWS/Azure/GCP Networking Specialty).
• Security certifications (e.g., CISSP, CISM) are advantageous.

Experience

• 5–10 years of experience in enterprise networking, hybrid cloud connectivity or infrastructure architecture.
• Proven experience designing and operating secure hybrid environments (cloud + on-prem).
• Hands‑on experience with firewall configuration, network segmentation and secure access models.
• Experience in network capacity planning and high‑availability architecture.
• Experience working with cybersecurity and DevSecOps teams in regulated environments.
• Familiarity with RedHat OpenShift networking and security is a plus.

Technical Skills

• Strong knowledge of TCP/IP, routing protocols, BGP, SD‑WAN, VPN, MPLS and data center networking.
• Experience with cloud networking architectures (AWS, Azure, GCP or equivalent).
• Deep understanding of firewall policies, IDS/IPS, network segmentation and Zero Trust frameworks.
• Knowledge of API security, secure integration patterns and encryption standards.
• Familiarity with network monitoring tools, SIEM integration and performance analytics.
• Exposure to AI workload connectivity and security concepts is advantageous.

Soft Skills

• Strong systems thinking and architectural mindset.
• Ability to balance security, performance and cost considerations.
• Strong stakeholder management across cross‑functional teams.
• Ability to communicate complex technical concepts to both technical and non‑technical audiences.
• Proactive risk identification and mitigation capability.