[LTA-DPO] PRP / SENIOR / EXEC ENGINEER, SYSTEM ASSURANCE AND ARCHITECTURE

[What the role is]

PRINCIPAL / SENIOR / EXECUTIVE ENGINEER
(SOLUTION ARCHITECT - INFRASTRUCTURE & SECURITY)

[What you will be working on]

We are seeking a passionate and experienced Solution Architect to play a key role in the modernisation of Singapore’s Automatic Fare Collection (AFC) system, which supports Account-Based Ticketing & Card-Based Ticketing, to deliver seamless, secure, and scalable public transport experience. This is a high-impact opportunity to contribute to the digital transformation of Singapore's public transport infrastructure and help shape solutions that are seamless, secure, and built to scale.

As part of the System Architecture and Assurance Division, you will lead end-to-end solution design, architecture governance, and technical assessments across a complex landscape of payment systems, cloud services, and multi-vendor integrations — ensuring reliability and security at a national scale.

What You Will Do

• Architect secure, scalable, and high-availability solutions for AFC and payment systems, including those built on EMV, open-loop standards, account-based ticketing, and card-based ticketing models in the GCC2.0 AWS environment.

• Design and govern end-to-end system integration architectures across distributed, multi-vendor environments, leveraging event-driven patterns and message-oriented middleware including messaging protocols such as MQ and MQTT, communication protocols such as HTTP/S and WebSockets, and integration patterns such as REST APIs, webhooks, and pub/sub architectures, to support both real-time and asynchronous processing needs.

• Lead security architecture design to ensure compliance with Govtech’s IM8 and security requirements to safeguard sensitive payment and commuter data.

• Lead network infrastructure design, including the planning and governance of network topology, connectivity, and security controls across cloud and hybrid environments to ensure scalable, resilient, and secure deployments

• Produce and maintain system architecture and networking infrastructure diagrams, API and interface specifications, and integration designs with clear documentation of network infrastructure components.

• Translate business and system requirements into high-level and detailed technical specifications, interface designs, and integration patterns suited to complex multi-system environments. Perform technical impact analysis for change requests and system enhancements, ensuring minimal disruption to mission-critical AFC operations.

• Conduct solution walkthroughs, architecture reviews, and technical presentations for internal and external stakeholders. Collaborate with internal stakeholders (project teams, software development, operations) and external partners (vendors, financial institutions) to develop robust and future-ready solutions.

[What we are looking for]

• Knowledge in Engineering, Computer Science, Information Systems, or related field.

• At least 5 years of experience in solution architecture, systems analysis/design, or complex enterprise IT infrastructure.

• Networks and Protocols — working knowledge of common network and communication protocols such as TCP/IP, HTTP/S, FTPS, and SFTP, and the OSI model as applied to enterprise system design.

• Enterprise Integration Patterns — experience designing solutions using APIs, webhooks, WebSockets, message queues, MQTT, and pub/sub or event-driven architectures across complex, multi-system environments.

• Data and Interfaces — familiarity with data serialisation formats such as JSON and binary, and how these are applied across system integration touchpoints.

• Network Infrastructure — understanding of IP addressing, CIDR, subnets, firewalls, routers, MPLS, and availability zone design in cloud and hybrid environments.

​Bonus Skills:

• AWS certifications (e.g., AWS Certified Solutions Architect – Associate/Professional) are strongly preferred

• Experience in Automatic Fare Collection (AFC) systems, open-loop payment architecture, or financial-grade transaction systems.

• Strong knowledge of security architecture, including secure data flows, tokenisation, encryption, and compliance standards (e.g., PCI DSS).

• Hands-on exposure to DevSecOps, CI/CD, containerisation (e.g., ECS, EKS), serverless architecture, or data streaming pipelines.

• Security and Compliance — experience embedding a defence-in-depth approach across all layers of solution design, encompassing network security, identity and access management, data protection, encryption, vulnerability management, and threat detection and response, with a strong understanding of government and industry compliance standards such as IM8 and PCI-DSS.

• GCC AWS — familiarity with Singapore's Government Commercial Cloud on AWS, including its governance requirements and deployment constraints.