Principal Cyber Security Architect (Infrastructure & Manufacturing)

dyson; Singapore; On-site; SGD 200,000 - 280,000; Full time

Job summary

Dyson seeks a Principal Cybersecurity Architect for Infrastructure & Manufacturing Security to be the technical authority on security architecture across enterprise infrastructure, manufacturing environments, OT, industrial IoT and the systems underpinning Dyson engineering, supply chain and production operations.

You will own architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, database, identity, cloud, OT and industrial

Qualifications

• Extensive experience designing and implementing security architectures across network, server, storage, database, cloud, identity and manufacturing environments.
• Proven implementation of Purdue Model aligned segmentation, industrial DMZs, OT zoning and secure conduits.
• Deep understanding of ICS/OT technologies including PLCs, SCADA, DCS, MES and industrial protocols.
• Strong expertise in enterprise network architecture and security controls.

Responsibilities

• Define target-state security architectures for enterprise infrastructure and manufacturing environments.
• Own security architecture and segmentation strategy aligned to Purdue Model.
• Lead architecture reviews for facilities, labs, warehouses and technology platforms.
• Design resilient network security architectures including campus, WAN, cloud connectivity and Zero Trust controls.
• Define patterns for server, virtualization, hypervisor, container and storage security.

Skills

Security architecture design

Purdue Model segmentation

Industrial OT/ICS knowledge

Threat modelling

Zero Trust

Hybrid/cloud environments

Tools

Kubernetes

Windows

Linux

NAC

OPC-UA

Job description

About us

At Dyson, we are not just creating innovative, technology-enabled products; we are also breaking new ground in cybersecurity. Our products are becoming more advanced and interconnected, which means we face a constantly evolving cyber threat landscape. This requires a highly skilled candidate to join our team, with a passion for staying ahead of emerging threats and keeping our products secure.

We take a proactive approach to cybersecurity. We do not wait for threats to emerge; we anticipate them and respond with innovative solutions. This means that at Dyson, you will have the opportunity to work with innovative technologies, like artificial intelligence and machine learning, to protect our products and customers.

You will be part of a team of cybersecurity experts, utilizing the latest tools and technologies to identify and respond to threats in real-time. You will work closely with our engineering and product teams to ensure that security is integrated into every aspect of our business.

Join our team at Dyson, and you will be at the forefront of cybersecurity, working on some of the most innovative and advanced products in the industry. You will have the opportunity to develop your skills and knowledge, collaborating with a talented team of experts to ensure we are always secure. If you are passionate about cybersecurity and looking for an exciting and challenging role, Dyson is the place for you.

About the role

As Principal Cybersecurity Architect for Infrastructure & Manufacturing Security, you will be the technical authority for security architecture across enterprise infrastructure, manufacturing environments, operational technology, industrial IoT and the systems that underpin Dyson engineering, supply chain and production operations. The role owns architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, database, identity, cloud, OT and industrial control systems.

What you will do

• Define target-state security architectures for enterprise infrastructure, manufacturing networks, industrial platforms and Operational Technology environments.
• Own security architecture and segmentation strategy aligned to Purdue Enterprise Reference Architecture, including Levels 0-5, industrial DMZs, conduit design, trust boundaries and secure remote access.
• Lead architecture reviews for manufacturing facilities, factories, R&D laboratories, warehouses and supply-chain technology platforms.
• Design resilient network security architectures including campus, WAN, SD-WAN, datacentre, cloud connectivity, firewalls, NAC, DNS security, micro-segmentation and Zero Trust controls.
• Define hardened server, virtualisation, hypervisor, container and storage security patterns including privileged access, monitoring, configuration baselines and recovery controls.
• Design database security architectures covering Oracle, Microsoft SQL, PostgreSQL and distributed data platforms, including encryption, PAM integration, audit logging, activity monitoring and segregation of duties.
• Define OT and IIoT security controls for PLCs, HMIs, SCADA, historians, engineering workstations, industrial gateways and manufacturing execution systems.
• Establish architecture standards aligned to IEC 62443, NIST 800-82, Purdue Model, Zero Trust principles and secure manufacturing practices.
• Lead threat modelling against ransomware, supply-chain compromise, engineering workstation compromise, lateral movement, unsafe control manipulation and loss-of-view/loss-of-control scenarios.
• Drive secure onboarding of connected manufacturing assets and industrial IoT platforms, including identity, certificate management, firmware integrity and lifecycle governance.
• Work with engineering and operations teams to define compensating controls where legacy OT systems cannot support modern security capabilities.
• Define security requirements for industrial remote access, third-party suppliers, maintenance providers and manufacturing support partners.
• Provide senior technical leadership during cyber incidents affecting enterprise or manufacturing environments.

To succeed in this role you should,

• Extensive experience designing and implementing security architectures across network, server, storage, database, cloud, identity and manufacturing environments.
• Proven implementation experience of Purdue Model aligned segmentation, industrial DMZs, OT zoning strategies and secure conduits.
• Deep understanding of ICs and OT technologies including PLCs, SCADA, DCS, historians, MES, engineering workstations and industrial protocols such as Modbus, Profinet, EtherNet/IP, OPC-UA and MQTT.
• Strong expertise in enterprise network architecture including routing, switching, firewalls, NAC, SD-WAN, micro-segmentation and network detection technologies.
• Hands-on security architecture experience across Windows, Linux, virtualisation platforms, Kubernetes and hybrid cloud environments.
• Strong database security kn