Solution Architect

About the Role

Webnyay Private Limited is looking for an experienced Solution Architect to lead the architecture and technical design of a secure, scalable, on-premises enterprise platform for a public sector undertaking.

The ideal candidate will have extensive experience in enterprise architecture, BFSI or government projects, data centre and disaster recovery (DC/DR), high availability, cybersecurity, regulatory compliance, and enterprise integrations. The role requires close collaboration with development, AI/ML, infrastructure, security, and client teams to ensure successful implementation and production readiness.

Key Responsibilities

Architecture and Technical Design

• Own the High-Level Design (HLD), review all Low-Level Designs (LLDs), and drive bank sign-off within the first two weeks.
• Develop integration blueprints covering API contracts, authentication, data mapping, and error handling for all in-scope enterprise systems.
• Define infrastructure sizing and requirements for primary and disaster recovery data centres, including servers, operating systems, database licences, networking, SSL certificates, and firewall rules.
• Make and document key architectural decisions, including trade-offs involving security, scalability, performance, and delivery timelines.
• Establish architectural standards and ensure implementation aligns with approved designs.

High Availability, Performance and Disaster Recovery

• Design active-passive high availability across data centres and disaster recovery sites, including automated failover.
• Define and validate architecture against 99.95% uptime, RPO of 15 minutes, and RTO of 60 minutes.
• Lead quarterly disaster recovery drills and coordinate recovery planning with infrastructure and operations teams.
• Design for horizontal scaling, read replicas for reporting, asynchronous processing, and future-ready database sharding.
• Define observability standards, including health, latency and error dashboards, distributed tracing, and log forwarding to SIEM platforms using CEF/LEEF formats.

Security, Compliance and Governance

• Ensure architecture aligns with applicable bank security policies, including ISSP and DPSC, the DPDP Act 2023, relevant RBI IT outsourcing and IT governance directions, and the Information Technology Act, 2000.
• Define security controls covering AES-256 encryption at rest, TLS 1.2 or higher in transit, role-based access control (RBAC), maker-checker workflows, multi-factor authentication (MFA), PII masking, and privileged identity/access management (PIM/PAM).
• Design immutable audit trails and regulatory data-retention policies, typically supporting 710 years of retention.
• Lead technical coordination for vulnerability assessment and penetration testing (VAPT), third-party security reviews, information systems audits, and RBI examinations.
• Own Software Bill of Materials (SBOM) and Cryptographic Bill of Materials (CBOM) requirements.

AI and Enterprise Integration Architecture

• Collaborate with the AI Engineer to design secure, self-hosted AI/LLM deployment, model serving, scaling, versioning, and workload isolation.
• Ensure sensitive bank data remains within the bank-controlled environment.
• Design auditability for AI-generated outputs, human decisions, and associated actions.
• Implement architectural controls for category-wise AI enablement and switch-off.
• Define integration patterns for enterprise identity, SIEM, PIM/PAM, and other third-party systems.

Required Skills and Qualifications

• B.E./B.Tech/M.Tech in Computer Science or an equivalent qualification.
• 12+ years of experience in software engineering, including at least 4 years in a Solution Architect or Enterprise Architect role.
• Proven experience designing on-premises enterprise platforms for BFSI, banking, or government clients.
• Strong expertise in DC/DR architecture, high availability, automated failover, disaster recovery, and business continuity.
• Deep understanding of three-tier and service-based architectures, API gateways, message queues, caching, and distributed systems.
• Working knowledge of Python/Django, React, and PostgreSQL, including replication, backup, and failover.
• Experience integrating enterprise identity systems such as Active Directory, LDAP, SAML, and OIDC.
• Experience integrating SIEM and privileged identity/access management systems.
• Strong knowledge of application security, infrastructure security, encryption, access control, and audit requirements.
• Experience taking enterprise systems through VAPT, information systems audits, and security assessments.
• Working knowledge of Indian BFSI regulations, including applicable RBI IT outsourcing and governance directions and the DPDP Act 2023.
• Excellent technical documentation, presentation, and stakeholder management skills.
• Ability to present and defend architecture decisions before bank IT, security, compliance, and audit teams.
• Willingness to work fully onsite in Pune during the 12-week implementation period and travel to Pune as required thereafter.

Good to Have

• Architecture certifications such as TOGAF or security certifications such as CISSP or CISA.
• Experience with core banking integrations, including Finacle.
• Familiarity with government grievance management platforms such as SPGRS or CPGRAMS.
• Experience deploying self-hosted AI/LLM workloads and planning GPU infrastructure capacity.
• Experience with on-premises containers and orchestration platforms such as Docker, Kubernetes, or OpenShift.
• Exposure to ISO 27001, STQC, or CERT-In audit processes.
• Experience preparing bank RFP responses, technical proposals, and technical bid documents.

What We Offer

• Architectural ownership of a flagship enterprise platform for a public sector undertaking.
• Direct collaboration with the founders and an opportunity to influence Webnyay's broader product architecture.
• An opportunity to work at the intersection of Generative AI, regulatory technology, cybersecurity, and consumer protection.