Key Responsibilities
A. Architecture Leadership & Strategy
- Lead the APAC network solution-architecture practice and define the target-state architecture, principles, standards, and multi-year technology roadmap in alignment with enterprise direction.
- Translate business and technology strategies into practical network capabilities, transition architectures, investment priorities, and implementation sequencing.
- Act as the senior design authority for complex or high-risk network initiatives and provide clear technical recommendations, decisions, and escalation paths.
- Identify opportunities to simplify and standardise the network estate, reduce technical debt, improve resilience, and enable automation and operational efficiency.
B. Solution Design & Technical Assurance
- Lead requirements discovery and develop secure, resilient, scalable, and cost-effective network solutions for projects, programmes, application onboarding, site changes, cloud adoption, and technology refresh.
- Own or assure high-level designs, low-level design principles, architecture decision records, option assessments, bills of material, migration approaches, test strategies, and implementation guardrails.
- Ensure each solution addresses availability, capacity, performance, security, segmentation, manageability, observability, disaster recovery, lifecycle, and operational support requirements.
- Conduct design reviews, challenge assumptions and exceptions, resolve cross-domain dependencies, and provide formal technical approval or remediation conditions before implementation.
C. Network Domain Architecture
- Provide architecture leadership across routing and switching, data centre networking, campus and branch networks, WAN/SD-WAN, Internet gateways, wireless, remote access, DNS/DHCP/IPAM, and network management.
- Design integrated network-security solutions covering firewalls, segmentation, VPN, secure web access, network access control, privileged administration, logging, and policy enforcement.
- Define connectivity patterns for public cloud, private cloud, SaaS, partner, market, and third-party services, including routing, security, resilience, and traffic-flow requirements.
- Guide application delivery and traffic-management architecture, including load balancing, global traffic management, proxy services, certificate dependencies, and service health monitoring.
D. Governance, Standards & Compliance
- Establish and maintain reference architectures, approved design patterns, engineering standards, configuration principles, technology standards, and reusable architecture templates.
- Embed security-by-design, least privilege, defence in depth, segregation, auditability, and regulatory requirements into solution architecture and decision-making.
- Support risk assessments, exception requests, audit responses, control evidence, and remediation planning with clear technical rationale, ownership, compensating controls, and target-state direction.
- Ensure solutions comply with enterprise architecture, information security, change management, lifecycle, data handling, and applicable regional regulatory requirements.
E. Project Delivery, Implementation & Stakeholder Leadership
- Own and drive the network workstream across the full project lifecycle, from initiation, requirements, solution design, planning, and procurement through build, testing, migration, implementation, stabilisation, handover, and project closure.
- Develop and maintain the network delivery plan, key milestones, dependencies, resource requirements, implementation sequencing, acceptance criteria, and technical deliverables in coordination with project managers and workstream leads.
- Provide hands‑on leadership during implementation, ensuring engineers and vendors execute the approved design, follow engineering standards, complete required evidence, and resolve technical issues without compromising security, resilience, or quality.
- Drive implementation readiness reviews, confirming prerequisites such as approved designs, hardware and licensing, circuit readiness, security approvals, change records, test plans, rollback procedures, support coverage, communications, and stakeholder sign‑off.
- Coordinate build, configuration, integration, testing, migration, cutover, and validation activities across Network Operations, RNOC, Security, Infrastructure, Cloud, Applications, service providers, and business stakeholders.
- Track and communicate delivery status, technical risks, issues, decisions, dependencies, scope changes, and recovery actions; elevate material concerns early and drive accountable owners to closure.
- Ensure project changes comply with change‑management requirements and that implementation outcomes are validated against design, performance, resilience, security, monitoring, and business acceptance criteria.
- Lead post‑implementation validation and stabilisation, ensure defects and residual risks are documented and remediated, and confirm complete operational handover before project closure.
F. Commercial, Vendor & Technology Management
- Lead technical evaluation of products, services, proposals, and proofs of concept, ensuring that selections align with architecture standards, support strategy, security requirements, and total cost considerations.
- Work with procurement and vendors to validate solution scope, licensing, sizing, supportability, interoperability, lifecycle, delivery assumptions, and contractual technical commitments.
- Maintain awareness of industry developments and vendor roadmaps, assessing their relevance, maturity, risks, and potential value to the APAC network strategy.
- Prevent unnecessary vendor lock‑in and solution sprawl by promoting open integration, reusable capability, standard platforms, and disciplined exception management.
G. Implementation Readiness & Operational Acceptance
- Define architecture acceptance criteria and ensure designs include monitoring, logging, capacity thresholds, backup, failover, support access, documentation, and recovery requirements.
- Assure implementation plans, migration methods, rollback strategies, test cases, failover tests, and operational handover deliverables for major or high‑risk changes.
- Partner with Network Operations, RNOC, service management, and engineering teams to confirm support readiness, ownership, runbooks, training, spares, vendor support, and escalation arrangements.
- Use lessons from incidents, problems, changes, performance trends, and operational feedback to improve architecture standards and future solution designs.
H. Team Leadership & Capability Development
- Lead, mentor, and develop network solution architects and senior engineers, setting clear technical expectations and promoting consistent architecture and documentation quality.
- Chair or contribute to architecture and design‑review forums, ensuring decisions are evidence-based, traceable, and aligned with agreed principles.
- Build reusable knowledge through design patterns, templates, decision records, lessons learned, and technical communities of practice across APAC.
- Promote a collaborative engineering culture that values simplification, automation, security, operational ownership, constructive challenge, and continuous improvement.
Qualifications & Requirements
- Bachelor’s degree in Computer Science, Information Technology, Engineering, Telecommunications, or a related discipline.
- Minimum 10–15 years of experience in enterprise networking, including significant experience in network solution architecture, technical design authority, or architecture leadership roles.
- Demonstrable experience designing large-scale, highly available solutions across data centre, campus, branch, WAN/SD-WAN, Internet, cloud connectivity, wireless, and network security domains.
- Deep knowledge of routing and switching, BGP, OSPF, QoS, multicast, VPN, high availability, network segmentation, DNS/DHCP/IPAM, load balancing, and network access control.
- Strong experience with enterprise technologies such as Cisco, Palo Alto Networks, Fortinet, F5, Meraki, Zscaler, and Cisco ISE, or equivalent platforms.
- Experience integrating networks with public cloud, SaaS, identity, security, monitoring, ITSM, and automation platforms.
- Strong architecture‑method, requirements‑analysis, option‑assessment, technical‑governance, risk‑management, and design‑documentation capabilities.
- Working knowledge of automation, APIs, Infrastructure as Code, configuration management, observability, and Site Reliability Engineering principles is highly desirable.
- Proven ability to lead architects and senior engineers, influence cross‑functional stakeholders, manage technical conflict, and communicate effectively with senior management.
- Experience in banking, financial services, or another regulated environment preferred; knowledge of MAS TRM and relevant regional regulations is advantageous.
- Practical knowledge of project governance, change control, implementation readiness, financial and commercial tracking, resource planning, and delivery reporting.
- Ability to manage technical delivery across internal engineering teams, service providers, vendors, project managers, and business stakeholders, with clear ownership of risks, issues, decisions, scope, quality, and delivery outcomes.
- Proven experience leading network project delivery and implementation across multiple countries or sites, including planning, dependency management, testing, migration, cutover, stabilisation, and operational handover.
- Preferred certifications include CCNP/CCIE or equivalent architecture certification, cloud‑networking certification, vendor security certification, and ITIL.
- Excellent written and verbal English, with the ability to produce clear architecture documents, executive recommendations, technical standards, and governance decisions.