ITOT Systems Engineer

AsHitachi Rail Singapore we are advancing rail signalling and safety solutions to ensure safe and efficient railway operations worldwide.

Our technologies help to bring billions of people reliably to their destinations by rail every year making sustainable mobility a reality.

IT/OT Systems Engineer (. R0139382)

at our location in Singapore

We are looking for an experienced IT/OT Systems Engineer to support the design integration cybersecurity testing commissioning and operation of technology systems used across our railway environment.

In this role you will bridge traditional Information Technology and railway Operational Technology. You will work with multidisciplinary teams responsible for operational control centres stations depots trackside infrastructure telecommunications signalling interfaces SCADA and supporting data-centre platforms.

You will help ensure that these systems remain secure safe resilient available and maintainable throughout their lifecycle. This is an opportunity to contribute to critical transportation infrastructure where sound engineering decisions have a direct impact on service continuity operational performance and passenger confidence.

You will enjoy having these responsibilities:

IT/OT Engineering and Integration

• Design cybersecured resilient IT/OT architectures for railway operational environments.
• Develop network diagrams system architectures data-flow diagrams interface specifications IP addressing plans and firewall communication matrices.
• Integrate railway applications with servers networks storage virtualisation identity services monitoring platforms and cybersecurity solutions.
• Support systems such as:
  • Operational and backup control centres
  • SCADA and station management systems
  • Signalling and train-control interfaces
  • Passenger information and public-address systems
  • CCTV access control and physical-security platforms
  • Automatic fare collection and ticketing systems
  • Depot and maintenance-management systems
  • Railway telecommunications and radio networks
  • On-board and train-to-ground interfaces
• Review supplier designs and ensure technical solutions meet operational cybersecurity availability and maintainability requirements.

Networks and Infrastructure

• Configure administer and troubleshoot routers switches firewalls VPN gateways servers storage and virtualisation platforms.
• Implement secure network segmentation between enterprise IT operational systems safety-critical environments suppliers and passenger-facing services.
• Establish demilitarised zones secure jump hosts access-control lists role-based access and controlled remote-maintenance solutions.
• Support Windows and Linux platforms directory services certificate services backups monitoring systems and centralised logging.
• Engineer solutions with appropriate redundancy fault tolerance disaster recovery and failover capabilities.

OT Cybersecurity

• Conduct or support cybersecurity threat vulnerability and risk assessments for railway systems.
• Identify critical assets trust boundaries system dependencies potential attack paths and operational or safety consequences.
• Translate risk assessments into practical and verifiable security requirements.
• Apply defence-in-depth and zones-and-conduits principles to railway IT/OT architectures.
• Develop and maintain secure configuration and system-hardening standards.
• Implement and improve:
  • Least-privilege access
  • Multifactor authentication
  • Privileged-access management
  • Secure vendor remote access
  • Network security monitoring
  • Endpoint protection and application allow-listing
  • Vulnerability and patch management
  • Removable-media controls
  • Security logging and alerting
• Develop compensating controls where conventional IT security measures cannot safely or operationally be applied to legacy OT systems.
• Support incident response recovery exercises forensic readiness and post-incident reviews.

Testing Commissioning and Operations

• Help prepare Factory Acceptance Tests Site Acceptance Tests System Integration Tests cybersecurity tests and operational readiness assessments.
• Verify system hardening firewall rules user access logging backups system recovery resilience and network segregation.
• Support installation and commissioning in laboratories control centres stations depots trackside locations and equipment rooms.
• Investigate incidents using system logs packet captures monitoring tools alarms and root-cause analysis techniques.
• Provide Level 2 or Level 3 technical support for assigned systems.
• Plan upgrades security remediation technology refreshes and end-of-life replacements while minimising disruption to railway operations.
• Maintain accurate asset inventories configuration baselines test evidence operating procedures and technical records.
• Prepare change requests impact assessments implementation plans rollback procedures and validation reports.

You have:

Qualifications and Experience

• Bachelors degree or equivalent qualification in Computer Engineering Computer Science Information Technology Electrical or Electronic Engineering Telecommunications Control and Automation Systems Engineering Railway Engineering Cybersecurity or a related discipline.
• Typically five or more years of relevant professional experience in railway transportation critical infrastructure industrial automation utilities aviation defence or another high-availability environment.
• Practical experience in IT/OT integration network engineering infrastructure engineering system integration cybersecurity or operational support.
• Experience working with suppliers system integrators internal engineering teams and operational stakeholders.
• Experience producing clear auditable engineering documentation.
• Familiarity with formal change configuration incident problem and risk-management processes.
• Railway or public-transport experience is strongly preferred.

Technical Knowledge

You should have strong knowledge in several of the following areas:

• TCP/IP VLANs switching routing multicast VPNs and network segmentation
• Enterprise or industrial firewalls and secure remote-access solutions
• Windows Server and Linux administration
• Active Directory LDAP RADIUS or equivalent identity technologies
• VMware Hyper-V or comparable virtualisation platforms
• Storage backup restoration and disaster recovery
• Public key infrastructure certificates and encryption
• Centralised logging infrastructure monitoring and network management
• Industrial control systems SCADA human-machine interfaces and engineering workstations
• OT vulnerability management secure configuration and compensating controls
• Packet capture event correlation and systems troubleshooting
• High-availability and geographically resilient system architectures

Knowledge of railway systemssuch as signalling CBTC ETCS/ERTMS station systems traction-power SCADA telecommunications rolling stock or operational control centreswould be an advantage.

Standards and Frameworks

Working knowledge of one or more of the following is highly desirable:

• CLC/TS 50701 Railway applications cybersecurity
• IEC 62443 series Industrial automation and control-system security
• EN 50126 / IEC 62278 Railway RAMS lifecycle
• EN 50128 / IEC 62279 Railway control and protection software
• EN 50129 / IEC 62425 Safety-related signalling systems
• EN 50159 Safety-related railway communications
• ISO/IEC 27001 and ISO/IEC 27002
• NIST Cybersecurity Framework and NIST SP 800-82
• CIS Controls and CIS Benchmarks
• Applicable national cybersecurity critical-infrastructure and data-protection requirements

Preferred Certifications

One or more of the following certifications would be advantageous:

• ISA/IEC 62443 Cybersecurity Certificate Program
• Global Industrial Cyber Security Professional GICSP
• Certified Information Systems Security Professional CISSP
• Certified Information Security Manager CISM
• Certified in Risk and Information Systems Control CRISC
• GIAC Response and Industrial Defense GRID
• GIAC Critical Infrastructure Protection GCIP
• Cisco CCNA CCNP Enterprise or CCNP Security
• Relevant Fortinet Palo Alto Networks or equivalent security certification
• Microsoft VMware Red Hat or Linux Foundation certification
• TÜV Functional Safety or railway RAMS qualification
• CLC/TS 50701 EN 50126 EN 50128 or EN 50129 training
• Certified Systems Engineering Professional CSEP

Relevant railway cybersecurity training typically combines IEC 62443 and TS 50701 with asset identification risk assessment segmentation hardening incident response and lifecycle governance.

Personal Competencies

• Strong analytical and structured troubleshooting skills
• Sound engineering judgement in safety- and availability-sensitive environments
• Ability to balance cybersecurity operational continuity maintainability performance and cost
• Clear written and verbal communication
• Ability to explain technical risks to both technical and non-technical stakeholders
• Confidence in reviewing supplier solutions and constructively challenging technical assumptions
• Strong collaboration across IT OT engineering safety cybersecurity operations and maintenance teams
• Commitment to accurate documentation knowledge sharing and continuous improvement

Our Talent Acquisition Team is looking forward to hearing from you

We look forward to receiving your application in just a few clicks via our career portal.

For further information about Hitachi Rail as an employer visit us on us

Our motivation is the mobility turnaround. To achieve this our teams find innovative products and solutions that ensure the operation and reliability of the entire rail network and increase capacities on the rails.

Our projects are diverse. To make our teams even stronger we are looking for your return we offer you an attractive overall package with the following benefits:

• Stronger together: Networking through internal networks and working in international teams
• Our drive: Together we are laying the foundations for the digitization of the rail around the world to get people safely to their destinations and to their loved ones!
• Attractive conditions: A secure and permanent job with a global company

Notes

Equal opportunities and self-determined participation of severely disabled persons and persons of equal status as well as respectful cooperation are firmly anchored principles within Hitachi Rail and its subsidiaries. We also aim to offer all our equal opportunities to start a career and to receive training and further education in our company. We consciously promote diversity and togetherness in our teams.