Lead AI Platform Network & Security Engineer

Position Summary

. Lead the design, implementation and operations of secure, resilient and scalable network and connectivity architecture for Singtel's Central AI Platform hosted on RE:AI IaaS.

. Establish and manage end-to-end connectivity across multi-cloud, on-premises systems, external SaaS platforms and API endpoints to enable enterprise AI use cases.

. Oversee network capacity planning, redundancy design, performance optimization and lifecycle management to support platform growth and commercialization.

. Ensure robust security architecture including firewall policies, segmentation, secure access controls and alignment with Singtel cybersecurity and DevSecOps standards.

. Serve as the primary technical authority for networking and security architecture of the AI platform, coordinating across RE:AI, Cloud, Cybersecurity, Infrastructure and Application teams.

. Enable a secure-by-design, scalable and high-availability network foundation to support enterprise-grade AI workloads and future expansion.

Make an Impact by:

. Designing and implementing hybrid connectivity architecture across RE:AI IaaS, public cloud platforms, on-prem environments and external partners for AIDA's Central AI Platform.

. Defining network segmentation, routing, peering, VPN, Direct Connect/ExpressRoute and API gateway patterns to enable seamless AI workload connectivity.

. Ensuring high availability, fault tolerance and redundancy across critical AI platform components.

. Leading firewall design, configuration standards, access control models and network security zoning.

. Implementing secure connectivity patterns including Zero Trust principles, encryption in transit and privileged access controls.

. Coordinating with Cybersecurity and DevSecOps teams on vulnerability management, security monitoring and incident response.

. Overseeing setup and maintenance of physical connectivity (e.g., cross-connects, colocation, data center interconnects).

. Monitoring bandwidth utilization, latency, throughput and network health, and executing proactive capacity expansion.

. Establishing network operations procedures, change management controls and escalation processes.

. Overseeing troubleshooting of connectivity and security incidents across hybrid environments.

. Acting as the central coordination point across internal teams and external partners.

Skills for Success:

Qualifications & Certifications

. Bachelor's degree in Computer Engineering, Network Engineering, Computer Science, Information Security or related discipline.

. Professional networking certifications (e.g., CCNP/CCIE, AWS/Azure/GCP Networking Specialty).

. Security certifications (e.g., CISSP, CISM) are advantageous.

Experience

. 5-10 years of experience in enterprise networking, hybrid cloud connectivity or infrastructure architecture.

. Proven experience designing and operating secure hybrid environments (cloud + on-prem).

. Hands-on experience with firewall configuration, network segmentation and secure access models.

. Experience in network capacity planning and high-availability architecture.

. Experience working with cybersecurity and DevSecOps teams in regulated environments.

. Familiarity with RedHat OpenShift networking and security is a plus.

Technical Skills

. Strong knowledge of TCP/IP, routing protocols, BGP, SD-WAN, VPN, MPLS and data center networking.

. Experience with cloud networking architectures (AWS, Azure, GCP or equivalent).

. Deep understanding of firewall policies, IDS/IPS, network segmentation and Zero Trust frameworks.

. Knowledge of API security, secure integration patterns and encryption standards.

. Familiarity with network monitoring tools, SIEM integration and performance analytics.

. Exposure to AI workload connectivity and security concepts is advantageous.

Soft Skills

. Strong systems thinking and architectural mindset.

. Ability to balance security, performance and cost considerations.

. Strong stakeholder management across cross-functional teams.

. Ability to communicate complex technical concepts to both technical and non-technical audiences.

. Proactive risk identification and mitigation capability.