Technology Architect

PT Chandra Asri Sentral Solusi (CASS) is a subsidiary of PT Chandra Asri Pacific Tbk (Chandra Asri Group) established to deliver Shared Service Center (SSC) solutions that support the Group’s growing business operation.

Our commitment is to empower Chandra Asri Group’s transformation and long-term growth by becoming a trusted strategic partner in business support and service delivery.

CASS plays a vital role in enhancing efficiency, standardizing process and driving operational excellence across the Group’s subsidiaries-including entities based in Singapore.

Job Purpose

Maintain the overview of Aster’s technology architecture and advises the Aster IDT leadership regarding key architectural changes and improvements. Ensure that Aster’s cloud, infrastructure, applications, integration, and security architecture are aligned with business needs, IT strategy, security requirements, and operational standards.

Key Responsibilities

Architecture & Governance

• Own and maintain the overall IT Architecture Baseline covering cloud, network, applications, integration, and security.
• Define and enforce architecture principles, standards, and technology patterns.
• Lead architecture reviews for major technology changes, new applications, and vendor onboarding.
• Maintain an Architecture Decision Log for key technology decisions.

Azure Cloud Architecture

• Shape and continuously refine Aster's Azure governance model , including Azure Landing Zone, network topology, policies, subscriptions, and resource management.
• Ensure appropriate cloud security, cost management, capacity planning, and scalability.
• Assess the Azure environment against Microsoft Cloud Adoption Framework and drive improvement actions.
• Provide architecture guidance for new Azure services and solutions.
• Work with infrastructure and security teams on Azure security, including Defender for Cloud, Azure Policy, network security, and hybrid connectivity.

Enterprise Architecture & Integration

• Maintain an overview of the organization's application landscape and system integrations across SAP, non-SAP applications, Salesforce, middleware, and OT systems.
• Lead application portfolio reviews to identify duplication, outdated systems, and opportunities for consolidation.
• Define integration and API standards for new system-to-system connections.

Security Architecture

• Define and maintain security architecture based on Zero Trust and identity-centric security principles.
• Design IAM, PIM/PAM, network segmentation, endpoint security, and security monitoring architecture.
• Support governance of Microsoft Entra ID architecture, including hybrid identity, Conditional Access, and identity lifecycle management.
• Support SIEM architecture and integration with security and IT service management processes.
• Define and maintain clear security boundaries between IT and OT environments.

IT Service Lifecycle & Continuous Improvement

• Establish end-to-end IT service lifecycle processes covering hardware, software, user access, onboarding/offboarding, and service retirement.
• Ensure appropriate security and architecture assessment is incorporated into technology onboarding.
• Lead continuous improvement initiatives to strengthen IT processes, governance, and operational maturity.
• Work with internal teams and managed service partners to improve IT capabilities, processes, and service delivery.

Requirements

Education & Experience

• Bachelor's degree in Information Technology, Computer Science, Engineering, or related field.
• Minimum 12 years of experience in IT architecture, with a strong combination of solution architecture, infrastructure design, and hands-on technology delivery.
• Proven experience in an architecture ownership or governance role.
• Strong hands-on experience with Microsoft Azure, including Azure Landing Zone, network architecture, Azure Policy, Defender for Cloud, Entra ID, and hybrid connectivity such as ExpressRoute or VPN.
• Strong understanding of security architecture, including Zero Trust, IAM/PIM/PAM, SIEM, and endpoint security.
• Experience establishing or improving IT processes in organizations with developing IT maturity.
• Strong communication, stakeholder management, and technical documentation skills.
• Ability to explain complex technical decisions clearly to both technical teams and senior leadership.
• Experience with SAP and enterprise application integration.
• Experience in IT/OT architecture and industrial environments.

If you’re ready to bring your skills to a dynamic environment where your work makes an impact across industries and borders, we’d love to hear from you. Join us at Chandra Asri Group and be part of shaping a smarter, more connected future. Apply today!

Important Notes

Chandra Asri is only releasing official job posting at Chandra Asri Career Site (careers.chandra-asri.com), Linkedin & Jobstreet. The Company will contact shortlisted candidate via official corporate email & phone, and will not send any hardcopy invitation for interview. Please note that the Company doesn’t ask candidates to transfer some amount of money nor cooperate with any travel agent.

BEWARE OF RECRUITMENT SCAM.