Senior Infrastructure Architect (Hybrid Datacenter & Public Cloud Foundations)
OCBC Bank · Singapore
WHO WE ARE:
As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.
Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future.
We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.
Your Opportunity Starts Here.
Senior Infrastructure Architect (Hybrid Datacenter & Public Cloud Foundations)
Role summary
Lead architecture and hands-on technical oversight of our hybrid infrastructure foundation across datacenters and public cloud. Scope includes enterprise networking, firewalls, F5 load balancing, VMware virtualization, and storage. Define standards and reference designs, oversee adoption with engineering teams, and align Platform, Security, Operations and delivery teams on consistent direction and operable outcomes.
Key responsibilities
Define target-state infrastructure architecture, standards, and roadmap across on-prem and public cloud foundations.
Architect and design with operational standards (telemetry, IAC , provisioning workflow ) for the following
Enterprise network patterns (segmentation, routing, resilience, operability, firewall zone model, and Load Balancer Pattern) and oversee implementation with network teams.
Virtualization / Hyperconverged patterns: cluster design, capacity/headroom policy, lifecycle (firmware/hypervisor/tooling), HA/live migration, and performance baselines.
Storage pattern: tiering, performance sizing, replication, backup/restore, encryption, DR design and restore validation; oversee implementation with storage teams.
Public cloud foundation patterns: landing-zone concepts, network segmentation, identity integration, encryption/key management integration, connectivity to on-prem, and operational guardrails.
Lead technical deep-dives on cross-layer incidents (network/LB/compute/storage/cloud) and convert learnings into standards and automation opportunities.
Provide hands-on technical leadership: lead PoCs when needed, review key configurations/IaC and design artefacts, guide troubleshooting war rooms, and validate production readiness with engineering teams.
Requirements
12+ years in enterprise infrastructure architecture with hands-on architecture oversight in production (design + guide build + operate).
Strong production experience across Cisco / Juniper / Arista, firewalls, F5, VMware, and SAN / NAS / Object Storage.
Strong L2/L3 troubleshooting depth:
BGP (eBGP/iBGP, ECMP, route policy/filtering, diagnosing leaks/blackholes)
ARP (cache behavior, gratuitous/proxy ARP, ARP flux; diagnosing VIP failover/intermittent connectivity)
Storage depth: storage fabric concepts and zoning/masking principles; performance sizing (IOPS/latency/throughput); replication/backup/DR; troubleshooting MPIO path failures and stuck IO.
Virtualization depth: NUMA/CPU ready time, contention, memory ballooning/swapping concepts; diagnosing virtualization-driven incidents (contention, migration impacts, snapshot growth).
Public cloud knowledge: experience designing foundational controls (network/security segmentation, connectivity, identity integration, encryption, logging/monitoring guardrails) and integrating with on-prem environments.
Strong stakeholder management: able to align multiple teams on standards, drive decisions, and maintain execution momentum.
Certifications (plus)
Networking: CCNP/CCIE, JNCIP/JNCIE, Arista ACE
Security/Firewalls: PCNSE / NSE / Check Point (or equivalent)
Load Balancing: F5 certifications (101/201/301/401)
Virtualization: VMware VCP/VCAP
Storage: Storage vendor certifications or training
Public cloud / security: major public-cloud certifications and/or CCSP
What we offer:
Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.