Lead Enterprise & Security Architect (Fintech Infrastructure)

Lead Enterprise & Security Architect (FinTechInfrastructure) Entity: OmniSyn SG Technologies Pte. Ltd. Location: Singapore (Hybrid / Local Sovereign Cloud Command) Position: Full-Time Core Team (Founding Layer) Equity: VIMA-Compliant Option Pool Allocation Available. Position Overview OmniSyn SG is recruiting a founding Lead Enterprise &Security Architect to steer the technical deployment of our real-time national healthcare financial clearinghouse utility. You will own the absolute design sovereignty of ahigh-performance network that connects corporate HR platforms, major brokerage networks, primary clinical terminals, and Tier-1 insurance carriers across Singapore. Your core mandate is to ensure our Lean Steel Thread microservices pipeline continuously delivers sub-50ms transactional clearing latency while strictly satisfying MAS FinTech Sandbox Plus, PDPC, and Health Information Act (HIA) 2026 data residency parameters natively at the perimeter edge. Core Responsibilities 1. System Topology & Infrastructure Design Architect and maintain a secure Hybrid Edge Cloud Topology utilizing local Singapore cloud boundaries (AWS ap-southeast-1 or GCP Singapore). Isolate public-facing perimeter nodes from air-gapped backend vaults housing our core relational schemas. 2. High-Velocity Message Streaming & Security Proxy Governance Configure and tune Kong API Gateway OSS instances in DB-less Mode using static local YAML schemas to eliminate database bloat. Mount and manage perimeter protection plugins, including hmac-auth signature checking and custom Token Bucket rate-limiting configurations. Design and supervise multi-topic Apache Kafka event message stream buffers to process unstructured payload spikes asynchronously without system timeouts. 3. Rules Engine Adjudication & Micro-Ledger Structuring Oversee the data object model matching framework feeding our in-memory Java-based Stateless Drools Engine. Ensure declarative rules perfectly parse and compute complex financial-grade variables, including MOH Private Fee Benchmarks, 5% co-payment splits, and rolling annual out-of-pocket ceilings. Structure highly optimized PostgreSQL relational micro-ledger tables using hardware-level AES-256 partition encryption filters. 4. Identity Ecosystem & Integration Governance Own the technical implementation of GovTech’s Singpass OpenID Connect (OIDC) 3-legged authentication loop. Enforce absolute privacy boundaries by mapping users via unique, system-generated 128-bit UUID hashes, completely removing raw NRIC numbers from database records to satisfy regulatory audits. Architect hands-free transactional synchronization pipes directly linking system outputs to the platform's Xero automated invoicing API gateway. Technical Profile & Prerequisites Experience: 7+ years directing core software architectures within high-volume FinTech processing environments, clearinghouse utilities, or medical-grade data exchanges. Runtime Languages: Advanced engineering fluency across Java (for Drools rules environments), Node.js, or Python microservices. Infrastructure Domain: Expert mastery of Kong Gateway setups, Apache Kafka clustering topologies, Docker environments, and PostgreSQL index optimization. Identity Tech: Deep operational knowledge of OAuth 2.0, FAPI 2.0, and OpenID Connect protocols (prior deployment inside GovTech Singpass Developer staging environments is highly valued). Regulatory Vetting: Proven experience passing institutional technical audits under MAS TRM (Technology Risk Management) guidelines or state healthcare data frameworks.