Infrastructure & Security Solution Engineer

ASM is a leading global supplier of products, services, and materials for semiconductor processing. For more than half a century, innovation has been at the core of everything we do. Our smart, ambitious people are dedicated to creating cutting-edge solutions for the world's leading semiconductor providers. Every day we push the development of next-generation computer-chip technology, always staying a few steps ahead of what's next.

The talented, enthusiastic people at ASM are just like you: dedicated to improving people's lives and unlocking new potential. With our collaborative approach to R&D, we advance key semiconductor technologies and platforms like ALD, epitaxy, PEALD, PECVD, and vertical furnaces. And we have recently entered the promising high-growth market: silicon carbide epitaxy. Year after year, our innovations help to make chips smaller, faster, and more powerful. In fact, you will find our technology in every aspect of modern life: in AI, medical equipment, 5G, smartphones, autonomous driving, and more.

Job Summary: Reporting to the Global IT Infrastructure & Security Engineering Manager, the position manages the demand intake, solution design, and solution delivery to ensure that every deployment incorporates a secured infrastructure by design. The role needs to deliver a technology roadmap to secure the landscape based on the guiding principles chartered as a security governance. You will collaborate with other IT teams (Enterprise Architect, Technology Architects, Global IT Identity Operation, Global IT Security Operation, Global IT Infrastructure Operations, SAP Application, Digital Application, and Cyber Governance) and ASM businesses to ensure their infrastructure security architecture and solution delivery needs are met.

Key responsibilities:

• Front the engagement with various technical domains and business units as part of demand intake, solution management, and solution delivery

• Analyze current state and the guiding governing principles to subsequently develop roadmap and implementation plans of future state

• Assist in post-implementation and continuous improvement efforts to enhance both cybersecurity posture and functionality

• Act as the expert in network, hosting (physical hosting, cloud, platforms), and endpoint to be able to secure the landscape

• Engage and govern external partners to assist in the delivery of long-term projects while ensuring functionality and security of the solution is delivered as expected

• Define, design and implement cloud-based and hybrid (mix of cloud & on-premise) based infrastructure solutions including high availability and disaster recovery

• Analyze the current landscape against requirement from multiple aspects such as security integration/standardization, TCO (Total Cost of Ownership), Demand vs Supply, internal skillset availability, and alignment with other applications

• Securely install, configure, implement and support Windows servers including management of user/group accounts & policies, integration to Active Directory, Azure Active Directory and Active Directory Federation Services

• Securely install, configure, implement and support network-related technologies such as SD-WAN, MPLS, LAN, WIFI, Firewalls/IPS/IDS, VPN, IPSec/GRE, IPAM, UTM, etc.

• Play the role of the final technical escalation point to the infrastructure operations team

• Drive automation by scripting (e.g. PowerShell, Python, TCL)

• Prepare business case justifications for infrastructure-related initiatives including justifications on major architectural changes

• Lead major IT Infrastructure initiatives including Merger & Acquisition Due Diligence and Integration

• Keep abreast of technology and industry trends and their relevance to ASM operations

• Understand customer needs and pain points, industry trends, and establish and communicate plans to address these

• Collaborate with other IT teams such as Global IT Security Operation, Global IT Identity Management, Global IT Infrastructure Operations, SAP Applications, Digital Application, Cyber Governance, IT Business Partners and so forth to provide a holistic set of IT services to the business and to facilitate cross functional problem resolution and process improvements

• Abide by and propose updates to overall IT policies, standards and procedures.

• Drive the documentation and implementation of SOPs, policies, and guidelines

• Ensure that appropriate actions are taken to anticipate, investigate and resolve problems in systems and services. Ensure that such problems are fully documented within the relevant reporting systems. Coordinate the implementation of agreed remediation, corrective actions and preventative measure. Analyze data patterns and trends.

• Lead in business continuity planning and lead disaster recovery planning activities of IT systems

The ideal candidate will have (education & experience):

• Degree in Computer Engineering or equivalent.

• Minimum 10 years of relevant experience in the design, build and support of a global infrastructure

• Strong working knowledge and experience in the following:

• Azure Cloud architecture and Microsoft Security Tools (Windows Defender ATP, MDE, MDI, MDC, Azure ATP, Azure Security Center)

• Hyperconverged infrastructure for on-premise cloud architecture, preferably Nutanix

• SAP S/4 HANA infrastructure

• Active Directory, Azure Active Directory and Active Directory Federation Services

• Exchange or equivalent email infrastructure

• Internet Routing protocols and technologies including TCP/IP (IPv6), OSPF, BGP, VPN, GRE/IPSEC, D/QoS, etc

• Security solution such as firewall (and associated functionalities such as IPD, IDS, AV, Anti-spoof, DoS/DDoS, Policy based routing, Next Gen FW, WAF, etc.), CDN, CASB, SIEM, and Vulnerability Assessment

• LDAP, RADIUS, DNS, DHCP, NAC tools

• Windows server OS

• Linux server OS

• Microsoft Clustering

• Microsoft Defender for Cloud and Microsoft Defender for Identity

• Veeam backup and replication

• Proxy, Reverse Proxy, Load balancers

• SCOM, SCCM

• Certificate management

• VDI (Horizon)

• Microsoft Direct Access

• Good working knowledge and experience in the following:

• OT security technologies

• Data Center facilities and associated technologies

• Cloud SASE (Secure Access Service Edge) and SD-WAN (Software Defined Wide Area Network) solutions

• Cloud native technologies (e.g. Containerisation, CI/CD pipeline, IaaC automation, etc.)

• Identity Access Management (IAM)

• Multi-function Authentication (MFA)

• System hardening guidelines and frameworks e.g., CIS, NIST, ISO27001

• Merger & Acquisition (M&A) integration experience

• Good at handling vendors in an outsourced environment. Be able to guide and provide coaching to them as needed.

• Certified in security (CISSP, CISA, CISM, or GIAC suite)

• Certified Microsoft Azure Solution Architect

• Certified CCNP/CCDP/CCIE/CCDE

• Certified in ITIL v3 or v4

• Strong team player in a multi-cultural environment

• Strong verbal and written communication

• Strong customer focus

• Strong organizing and planning skills

Critical success criteria:

• Customer Focus - delivering the IT solution with a secured infrastructure and support that facilitates and improves the way we do business, improves employee experiences and contributes to the bottom line results.

• Responsive and Agile - stay in pace with our business stakeholders and users in ensuring they get the support from IT to perform their work to deliver to our customers

• Empathy - understand the underlying needs of stakeholders, challenges of global IT teams and vendors in order to deliver results.

• Building a high performing organization - ensuring the regional IT team that is a role model for work ethics, teamwork and service excellence.

• Reliable and persistent - keeping a constant focus on business continuity, resilience, risk management and cybersecurity.

• Excellent communication - the ability to work and build relationships with stakeholders throughout the company and in different cultures.

• Leading people: Ability to lead people toward meeting the organization's vision, mission, and goals. Inherent ability to provide an inclusive workplace that fosters the development of others, facilitates cooperation and teamwork, and supports constructive resolution of conflicts. Leadership Competencies: Conflict Management; Leveraging Diversity; multi-cultural acumen; Developing Others; Team Building.

• Results Driven: Ability to meet organizational goals and customer expectations. Inherent ability to make decisions that produce high-quality results by applying technical knowledge, analyzing problems, and calculating risks. Leadership Competencies: Accountability; Customer Service; Decisiveness; Problem Solving; Technical Credibility.

• Communication: Ability to build relationships internally and with other external organizations to achieve common goals. Leadership Competencies: Partnering; building Relationships; Influencing/Negotiating; Communicative.

At ASM we are committed to supporting our people, enabling them to develop their talents and perform at their best. We actively promote an inclusive and diverse culture that fosters trust and transparency. Our people are our power, and we value the differences between everyone because it is what make us better as a team. By embracing a wide range of perspectives, we enable a culture of continuous exploration and adoption of new ideas. At every step, we know that it is our valued people who enable us to deliver excellent products and service to our clients - and to make a meaningful difference in society.

So join us on our journey and unleash the power of an open mind. Discover how you can be part of our exciting future and apply today! To learn more about ASM, find us at asm.com and on LinkedIn, Facebook, Instagram and YouTube.