Job Description

Req ID:514793

At Alstom, we understand transport networks and what moves people. From high-speed trains, metros, monorails, and trams, to turnkey systems, services, infrastructure, signalling and digital mobility, we offer our diverse customers the broadest portfolio in the industry. Every day, more than 80 000 colleagues lead the way to greener and smarter mobility worldwide, connecting cities as we reduce carbon and replace cars.

Architectural Design & Specialization

· Tiered Architecture: Organizing systems into functional layers, such as separate web, application, and database servers.

· Specialized Infrastructure: Provisioning servers based on specific workloads (e.g., separating database servers from web servers) to avoid resource contention.

· Component Distribution: Using multiple app servers to handle user load and separate database nodes forread/write operations (e.g., CStore nodes in analytics).

· Multi-Region/Global Setup: Distributing infrastructure across multiple geographic regions to reduce latency and enhance disaster recovery.

Scalability & Performance

· Horizontal Scaling: The ability to increase capacity by adding more servers (scale-out) rather than just upgrading a single machine.

· Load Balancing: Implementing load balancers (e.g., Nginx) to distribute traffic efficiently across multiple servers, ensuring no single server becomes a bottleneck.

• Caching: Using distributed caching mechanisms to store frequently accessed data across nodes, improving responsiveness

Reliability & High Availability (HA)

• Redundancy & Failover: Implementing N+1 or N+N redundancy for power and cooling in multi-node setups to ensure continuous operation, even if a server fails.
• Active-Passive Setup: Using secondary, passive servers that take over immediately if the primary server goes offline.
• Data Replication: Ensuring consistency across databases or file systems using replication mechanisms between parent and child servers.

Monitoring & Management

• Granular Monitoring: Implementing monitoring tools to track the health, performance, and resource usage of each independent server in the cluster.
• Centralized Management: Managing widely distributed systems from a central location, such as using an Operational Bridge Manager (OBM).
• Automation: Using tools for automated deployment, configuration, and scaling (e.g., DevOps tools, container orchestration).

Security & Data Management

• Isolation: Keeping sensitive data on backend servers that do not directly communicate with the internet (e.g., PCI-DSS compliance).
• Secure Authentication: Managing user authentication across distributed services using secure protocols, such as token-based authentication or centralized identity management.
• Data Partitioning/Sharding: Distributing data across multiple database instances to manage large volumes and improve query performance Security & Compliance

• Ensure architecture compliance with secure boot and platform security principles
• Collaborate with cybersecurity stakeholders to validate system hardening and trust chains
• Integrate security considerations by design (defense‑in‑depth, least privilege, lifecycle security

Obsolescence & Sustainability

• Identify and assess technology obsolescence risks

You don’t need to be a train enthusiast to thrive with us. We guarantee that when you step onto one of our trains with your friends or family, you’ll be proud. If you’re up for the challenge, we’d love to hear from you!

Important to note

As a global business, we’re an equal-opportunity employer that celebrates diversity across the 63 countries we operate in. We’re committed to creating an inclusive workplace for everyone.