Principal Cyber Security Architect (Infrastructure & Manufacturing)

Dyson Institute; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Dyson is seeking a Principal Cybersecurity Architect for Infrastructure and Manufacturing Security to lead the security architecture across Dyson's enterprise infrastructure, manufacturing environments, OT and industrial IoT. You will own architecture direction, reference patterns, security standards and capability roadmaps spanning network, servers, storage, identity, cloud and OT.

You will collaborate with engineering, product and operations teams to embed security in every facet of Dyson's

Qualifications

• Experience designing security architectures across enterprise infrastructure, manufacturing networks, OT and IT environments.
• Familiarity with Purdue Enterprise Reference Architecture and industrial DMZ concepts.
• Proven ability to define security standards, reference architectures and low-level designs.

Responsibilities

• Define target-state security architectures for enterprise and manufacturing environments.
• Lead architecture reviews for facilities, laboratories, warehouses and supply-chain platforms.
• Design secure network, server, storage and cloud architectures including Zero Trust controls.
• Define OT/IIoT security controls for PLCs, HMIs, SCADA, MES and industrial gateways.
• Develop standards aligned to IEC 62443, NIST 800-82 and Purdue Model.
• Support cyber incident leadership and recovery planning.

Skills

Security architecture

OT & IT security

Threat modelling

Zero Trust

Executive stakeholder engagement

Network security

Education

Bachelor’s degree in CS/Engineering or related field

Tools

Kubernetes

Cloud platforms

Job description

About us

At Dyson, we are not just creating innovative, technology-enabled products; we are also breaking new ground in cybersecurity. Our products are becoming more advanced and interconnected, which means we face a constantly evolving cyber threat landscape. This requires a highly skilled candidate to join our team, with a passion for staying ahead of emerging threats and keeping our products secure. We take a proactive approach to cybersecurity. We do not wait for threats to emerge; we anticipate them and respond with innovative solutions. This means that at Dyson, you will have the opportunity to work with innovative technologies, like artificial intelligence and machine learning, to protect our products and customers. You will be part of a team of cybersecurity experts, utilizing the latest tools and technologies to identify and respond to threats in real‑time. You will work closely with our engineering and product teams to ensure that security is integrated into every aspect of our business. Join our team at Dyson, and you will be at the forefront of cybersecurity, working on some of the most innovative and advanced products in the industry. You will have the opportunity to develop your skills and knowledge, collaborating with a talented team of experts to ensure we are always secure. If you are passionate about cybersecurity and looking for an exciting and challenging role, Dyson is the place for you.

About the role

As Principal Cybersecurity Architect for Infrastructure & Manufacturing Security, you will be the technical authority for security architecture across enterprise infrastructure, manufacturing environments, operational technology, industrial IoT and the systems that underpin Dyson engineering, supply chain and production operations. The role owns architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, database, identity, cloud, OT and industrial control systems.

What you will do

Define target‑state security architectures for enterprise infrastructure, manufacturing networks, industrial platforms and Operational Technology environments. Own security architecture and segmentation strategy aligned to Purdue Enterprise Reference Architecture, including Levels 0–5, industrial DMZs, conduit design, trust boundaries and secure remote access. Lead architecture reviews for manufacturing facilities, factories, R&D laboratories, warehouses and supply‑chain technology platforms. Design resilient network security architectures including campus, WAN, SD‑WAN, datacentre, cloud connectivity, firewalls, NAC, DNS security, micro‑segmentation and Zero Trust controls. Define hardened server, virtualisation, hypervisor, container and storage security patterns including privileged access, monitoring, configuration baselines and recovery controls. Design database security architectures covering Oracle, Microsoft SQL, PostgreSQL and distributed data platforms, including encryption, PAM integration, audit logging, activity monitoring and segregation of duties. Define OT and IIoT security controls for PLCs, HMIs, SCADA, historians, engineering workstations, industrial gateways and manufacturing execution systems. Establish architecture standards aligned to IEC 62443, NIST 800‑82, Purdue Model, Zero Trust principles and secure manufacturing practices. Lead threat modelling against ransomware, supply‑chain compromise, engineering workstation compromise, lateral movement, unsafe control manipulation and loss‑of‑view/loss‑of‑control scenarios. Drive secure onboarding of connected manufacturing assets and industrial IoT platforms, including identity, certificate management, firmware integrity and lifecycle governance. Work with engineering and operations teams to define compensating controls where legacy OT systems cannot support modern security capabilities. Define security requirements for industrial remote access, third‑party suppliers, maintenance providers and manufacturing support partners. Provide senior technical leadership during cyber incidents affecting enterprise or manufacturing environments.

To succeed in this role you should

• Extensive experience designing and implementing security architectures across network, server, storage, database, cloud, identity and manufacturing environments.
• Proven implementation experience of Purdue Model aligned segmentation, industrial DMZs, OT zoning strategies and secure conduits.
• Deep understanding of IC and OT technologies including PLCs, SCADA, DCS, historians, MES, engineering workstations and industrial protocols such as Modbus, Profinet, EtherNet/IP, OPC-UA and MQTT.
• Strong expertise in enterprise network architecture including routing, switching, firewalls, NAC, SD‑WAN, micro‑segmentation and network detection technologies.
• Hands‑on security architecture experience across Windows, Linux, virtualisation platforms, Kubernetes and hybrid cloud environments.
• Strong database security knowledge including access control, encryption, key management, DAM, logging and high‑availability architectures.
• Experience implementing Zero Trust for both traditional enterprise infrastructure and manufacturing environments.
• Strong understanding of attack paths between IT and OT environments and practical methods to reduce blast radius and lateral movement.
• Experience developing technical standards, reference architectures, low‑level designs and audit‑defensible security requirements.
• Ability to engage deeply with engineering, manufacturing, infrastructure, network and operations teams while influencing executive stakeholders.
• Enterprise infrastructure security: network, server, storage, virtualisation, cloud and identity.
• Manufacturing security: factory systems, MES, OT monitoring, IC security and industrial operations.
• Industrial networking: Purdue architecture, segmentation, firewalls, industrial DMZs and secure conduits.
• OT governance: IEC 62443, NIST 800‑82, risk assessments and compensating controls.
• Industrial IoT: device identity, PKI, firmware integrity, lifecycle management and telemetry security.
• Cyber resilience: backup, recovery, ransomware containment, operational continuity and disaster recovery.

Equal opportunity

Dyson is an equal opportunity employer. We know that great minds don’t think alike, and it takes all kinds of minds to make our technology so unique. We welcome applications from all backgrounds and employment decisions are made without regard to race, colour, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other any other dimension of diversity. At Dyson we are focused on solving the problems that others have ignored; solving them first using our technology and ingenuity. In order to achieve this we need to pioneer technologies that are different and authentic. This is the core of what we do and who we are. We must strive to create the future, every single day by developing new things, different things, things that go against the grain with a diverse and global team of ingenious minds. Dyson employs 14,000 people and is present in more than 80 countries. And while we are growing fast we want Dyson to remain a start‑up in spirit with the freedom of experimentation and learning, constantly reinventing our products as well as reinventing how we work, how we sell and how we support our owners. At the same time we are working through the James Dyson Foundation, James Dyson Award and Dyson Institute to inspire future engineers and pioneering a new approach to engineering education. Underlining everything we do in this diverse environment is the need to always show respect, supporting each other as one team to overcome whatever challenges we encounter. We drive empowerment, development and equality in an inclusive environment for our people around the world. The future doesn’t just happen, we look to make it happen, to achieve leaps through pioneering new ideas.