Lead Architect

Job description

Req ID:514793 At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Architectural Design & Specialization

Tiered Architecture

• Organizing systems into functional layers, such as separate web, application, and database servers.

Specialized Infrastructure

• Provisioning servers based on specific workloads (e.g., separating database servers from web servers) to avoid resource contention.

Component Distribution

• Using multiple app servers to handle user load and separate database nodes forread/write operations (e.g., CStore nodes in analytics).

Multi-Region/Global Setup

• Distributing infrastructure across multiple geographic regions to reduce latency and enhance disaster recovery. Scalability & Performance

Horizontal Scaling

• The ability to increase capacity by adding more servers (scale-out) rather than just upgrading a single machine.

Load Balancing

• Implementing load balancers (e.g., Nginx) to distribute traffic efficiently across multiple servers, ensuring no single server becomes a bottleneck.

Caching

Using distributed caching mechanisms to store frequently accessed data across nodes, improving responsiveness.

Reliability & High Availability (HA) Redundancy & Failover

Implementing N+1 or N+N redundancy for power and cooling in multi-node setups to ensure continuous operation, even if a server fails.

Active-Passive Setup

Using secondary, passive servers that take over immediately if the primary server goes offline.

Data Replication

Ensuring consistency across databases or file systems using replication mechanisms between parent and child servers.

Monitoring & Management Granular Monitoring

Implementing monitoring tools to track the health, performance, and resource usage of each independent server in the cluster.

Centralized Management

Managing widely distributed systems from a central location, such as using an Operational Bridge Manager (OBM).

Automation

Using tools for automated deployment, configuration, and scaling (e.g., DevOps tools, container orchestration).

Security & Data Management Isolation

Keeping sensitive data on backend servers that do not directly communicate with the internet (e.g., PCI-DSS compliance).

Secure Authentication

Managing user authentication across distributed services using secure protocols, such as token-based authentication or centralized identity management.

Data Partitioning/Sharding

Distributing data across multiple database instances to manage large volumes and improve query performance Security & Compliance

• Ensure architecture compliance with secure boot and platform security principles
• Collaborate with cybersecurity stakeholders to validate system hardening and trust chains
• Integrate security considerations by design (defense‑in‑depth, least privilege, lifecycle security

Obsolescence & Sustainability

• Identify and assess technology obsolescence risks You don’t need to be a train enthusiast to thrive with us.

We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you! Important to note As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.