Principal Cybersecurity Architect — Infrastructure & OT

Dyson Operations Pte Ltd; Singapore; On-site; SGD 210,000 - 270,000; Full time

Job summary

Dyson Operations Pte Ltd. seeks a Principal Cybersecurity Architect for Infrastructure & Manufacturing Security to be the technical authority across enterprise infrastructure, manufacturing environments, OT, and industrial IoT.

You will own architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, cloud, identity and industrial systems. You will lead threat modelling, design hardened security patterns, and drive secure onboarding of

Qualifications

• Extensive experience designing and implementing security architectures across network, server, storage, database, cloud, identity and manufacturing environments.
• Proven implementation experience of Purdue Model aligned segmentation, industrial DMZs, OT zoning strategies and secure conduits.
• Deep understanding of ICs and OT technologies including PLCs, SCADA, DCS, historians, MES, engineering workstations and industrial protocols such as Modbus, Profinet, EtherNet/IP, OPC-UA and MQTT.
• Strong expertise in enterprise network architecture including routing, switching, firewalls, NAC, SD-WAN, micro-segmentation and network detection technologies.
• Hands-on security architecture experience across Windows, Linux, virtualisation platforms, Kubernetes and hybrid cloud environments.
• Strong database security knowledge including access control, encryption, key management, DAM, logging and high-availability architectures.
• Experience implementing Zero Trust for both traditional enterprise infrastructure and manufacturing environments.

Responsibilities

• Define target-state security architectures for enterprise infrastructure, manufacturing networks, industrial platforms and Operational Technology environments.
• Own security architecture and segmentation strategy aligned to Purdue Enterprise Reference Architecture, including Levels 0–5, industrial DMZs, conduit design, trust boundaries and secure remote access.
• Lead architecture reviews for manufacturing facilities, factories, R&D laboratories, warehouses and supply-chain technology platforms.
• Design resilient network security architectures including campus, WAN, SD-WAN, datacentre, cloud connectivity, firewalls, NAC, DNS security, micro-segmentation and Zero Trust controls.
• Define hardened server, virtualisation, hypervisor, container and storage security patterns including privileged access, monitoring, configuration baselines and recovery controls.
• Design database security architectures covering Oracle, Microsoft SQL, PostgreSQL and distributed data platforms, including encryption, PAM integration, audit logging, activity monitoring and segregation of duties.
• Define OT and IIoT security controls for PLCs, HMIs, SCADA, historians, engineering workstations, industrial gateways and manufacturing execution systems.
• Establish architecture standards aligned to IEC 62443, NIST 800-82, Purdue Model, Zero Trust principles and secure manufacturing practices.
• Lead threat modelling against ransomware, supply-chain compromise, engineering workstation compromise, lateral movement, unsafe control manipulation and loss-of-view/loss-of-control scenarios.
• Drive secure onboarding of connected manufacturing assets and industrial IoT platforms, including identity, certificate management, firmware integrity and lifecycle governance.
• Work with engineering and operations teams to define compensating controls where legacy OT systems cannot support modern security capabilities.
• Define security requirements for industrial remote access, third-party suppliers, maintenance providers and manufacturing support partners.
• Provide senior technical leadership during cyber incidents affecting enterprise or manufacturing environments.

Skills

Security architecture

Purdue Model

Zero Trust

IEC 62443

NIST 800-82

OT/ICS knowledge

Kubernetes

Tools

Kubernetes

Hypervisor

Database security tooling

Job description

Dyson Operations Pte Ltd. seeks a Principal Cybersecurity Architect for Infrastructure & Manufacturing Security to be the technical authority across enterprise infrastructure, manufacturing environments, OT, and industrial IoT.

You will own architecture direction, reference patterns, security standards and capability roadmaps spanning network, server, storage, cloud, identity and industrial systems. You will lead threat modelling, design hardened security patterns, and drive secure onboarding of