The posting
Job Responsibilities:
- Design comprehensive end-to-end solution architectures for digital insurance platforms, encompassing customer portals, agent systems, and core backend services.
- Establish and enforce architecture standards that adhere to financial services regulations, security protocols, and compliance requirements.
- Architect secure and scalable frontend-to-backend communications using API gateways, enabling omnichannel access across web, mobile, and partner integrations.
- Design and review network topologies, including API gateways, load balancers, firewalls, DMZs, and secure connections to internal and external systems.
- Integrate application and API security best practices into solution designs, covering:OWASP Top 10 Secure API protocols (OAuth2, OpenID Connect, JWT, mTLS) Data encryption both in transit and at rest
- Assess and address findings from penetration tests, vulnerability assessments, and security audits in collaboration with security teams.
- Work closely with development, infrastructure, DevOps, security, and risk teams to ensure solutions align with enterprise policies and regulatory expectations.
- Provide architectural guidance throughout development, testing, deployment, and production support phases.
- Evaluate and recommend technologies, frameworks, and platforms that support high availability, resiliency, and disaster recovery.
- Create and maintain architecture documentation, including solution designs, integration diagrams, and security models.
Job Requirements:
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
- Proven experience as a Solution Architect or Technical Architect within financial services or insurance environments.
- Strong expertise in modern application frameworks and architectures, such as React, Angular, Spring Boot, .NET Core, Node.js, and microservices.
- Solid understanding of application security, including hands-on experience with:Penetration test remediation Vulnerability scanning analysis Secure coding and secure API practices
- Extensive experience with API Gateway platforms, e.g., Kong, Apigee, AWS API Gateway, or Azure API Management.
- In-depth knowledge of enterprise network architecture, including:Frontend-backend segregation API gateway placement Load balancing, firewall configuration, and secure connectivity
- Familiarity with insurance systems, sensitive data handling, and regulatory compliance (e.g., data protection, auditability, resiliency).
- Experience with cloud platforms (AWS, Azure, or GCP) and hybrid architectures is a plus.
- Exposure to CI/CD pipelines and DevSecOps practices is preferred.
- Strong analytical and problem-solving abilities with a risk-conscious mindset.
- Excellent communication skills, capable of translating complex technical concepts into business-relevant discussions.
- Ability to influence architecture decisions across cross-functional teams without direct authority.
- High accountability and ownership in a regulated enterprise environment.
- Collaborative, proactive, and able to balance innovation with compliance.
- Proficient in documentation, presentations, and stakeholder management.
Added Advantages:
- Experience with LLMOps or AI/ML platform architecture, including:Deployment and governance of large language models in enterprise settings Secure integration of LLMs with APIs and backend systems Model monitoring, version control, and risk management (e.g., data privacy, hallucination mitigation)
- Knowledge of responsible AI principles, particularly in regulated financial services contexts.



