Platform & Architecture Lead

About the Role

Drive the architectural vision, platform strategy, and transformational change across the organization's Engineering and Development environment. As senior technical authority and change lead, this role owns strategic design, continuous improvement, and governance across four domains: DevSecOps, cloud platforms (AWS), physical networks, and OT/IoT platforms — spanning local and overseas operations.

What You'll Do

• Define and govern target-state architecture across DevSecOps, cloud, networking, and OT/IoT environments, ensuring new platforms and integrations comply with enterprise policies and architectural standards.
• Lead technology transformation, championing modern platform engineering, AI-enabled automation, and a "security-by-design, automation-first" culture across teams.
• Drive DevSecOps adoption, integrating automated security controls into CI/CD pipelines and standardizing tooling to speed delivery without compromising security.
• Own architecture for cloud, servers, and physical networks (LAN/WAN/wireless), driving modernization and ensuring strong segmentation between IT and OT environments.
• Lead platform strategy for OT/IoT environments, securely integrating industrial assets and establishing architectural guardrails to minimize cyber risk.
• Support senior technology leadership on strategic planning, budgeting, and roadmap development, including executive reporting, vendor escalation, and ensuring smooth onboarding onto approved platform architectures.

What We're Looking For

• Familiarity with enterprise architecture frameworks (e.g., TOGAF, Zachman) and cloud/infrastructure design patterns.
• Strong AWS/cloud knowledge — landing zones, IAM, networking, containers, security, cost management, hybrid-cloud integration.
• Strong networking knowledge (routing, switching, firewalls, segmentation, zero-trust principles).
• Proven experience with IT/OT convergence, industrial protocols, SCADA, PLCs, and cyber-physical systems security.
• Good understanding of DevSecOps and automation — CI/CD, containerization (Docker, Kubernetes), Infrastructure as Code (Terraform, Ansible).
• Strong change management, stakeholder alignment, and communication skills — able to translate technical concepts for non-technical leadership.
• Strong risk management capability, with the ability to identify architectural risks and define practical mitigation strategies.

Account Manager

Jason He Runfeng

EA License No: 16S8107

EA Personnel Registration No: R25157533