Solution Architect - Java | Immediate Joiner

Solution Architect - Java | Immediate Joiner

About Us

ThoughtMinds is an AI, data, and digital transformation company building intelligent solutions for real-world business needs. We work across Generative AI, software engineering, data, automation, and emerging technologies to help organisations build and scale digital products and solutions.

The Solution Architect will own the end-to-end solution design for secure, resilient and maintainable applications in a regulated financial-institution environment. The role translates business workflows, integration obligations, non-functional requirements and infrastructure constraints into an implementable architecture spanning frontend, backend, data, identity, external interfaces and deployment. The Architect provides design direction and assurance across delivery teams, while the Engineering Lead remains accountable for hands-on implementation, code quality and day-to-day technical delivery.

Key responsibilities

• Lead technical discovery with product, business, security, infrastructure, operations and external stakeholders; document assumptions, constraints, dependencies and architectural risks.

• Define the target architecture, system boundaries, service responsibilities and integration strategy across frontend, backend, persistence, identity, messaging and deployment layers.

• Translate functional and non-functional requirements into measurable architecture decisions for performance, scalability, availability, security, auditability, recoverability and maintainability.

• Produce and maintain architecture documentation: system context, component and deployment diagrams, data flows, sequence diagrams, trust boundaries and architecture decision records (ADRs).

• Set technology and design baselines for Java 21+/Spring Boot, TypeScript/Next.js, REST/OpenAPI, PostgreSQL, caches, object storage and asynchronous processing; assess justified alternatives.

• Design secure API and external-system integration patterns, including authentication, authorization, idempotency, retries, timeouts, reconciliation, versioning and failure handling.

• Define data ownership, transactional consistency, schema evolution, retention and audit-trail patterns across relational and auxiliary data stores.

• Establish identity and security architecture, including federation, session and token handling, least privilege, secrets management, encryption and segregation of trust zones.

• Design deployment and operational architecture with platform teams, covering network ingress, orchestration, environment separation, high availability, disaster recovery, monitoring and rollback.

• Guide capacity and resilience planning through workload assumptions, critical user journeys, failure scenarios, recovery objectives and performance-testing criteria.

• Facilitate solution-design reviews, threat modelling, proof-of-concept decisions and architecture assurance at key delivery and release milestones.

• Partner with Engineering Leads and frontend/backend engineers to resolve cross-cutting design issues without displacing their ownership of implementation and engineering execution.

• Assess architectural trade-offs, delivery risks, operational complexity and long-term maintainability; communicate recommendations clearly to technical and non-technical decision-makers.

• Translate regulatory, government and financial-infrastructure requirements into practical integration, security, data-handling and operational controls.

Required technical skills

• Proven solution-architecture experience for production-grade web platforms, service-oriented systems and complex institutional integrations.

• Strong architectural understanding of Java 21+ and Spring Boot, with working design-level knowledge of TypeScript, React and Next.js.

• Distributed-system design: service boundaries, synchronous/asynchronous communication, concurrency, consistency, idempotency, fault tolerance and recovery.

• API architecture with HTTP, REST, JSON, OpenAPI, contract management, compatibility, authentication and versioning.

• Data architecture using PostgreSQL, transactions, indexing, schema migrations, caching, object storage and data-lifecycle controls.

• Identity and application security, including OAuth 2.0/OIDC, SAML-based federation, authorization models, encryption, secrets and threat modelling.

• Containers, Kubernetes or comparable orchestration, network segmentation, gateways/load balancing, DNS/TLS and deployment-topology design.

• CI/CD and software-supply-chain controls, artifact promotion, secure configuration, release strategies and rollback planning.

• Observability and operations architecture: structured logs, metrics, distributed tracing, alerting, dashboards, runbooks and incident diagnostics.

• Architecture modelling and decision governance; ability to define quality attributes, explain trade-offs and review implementation designs.

Desirable languages and frameworks

Architectural and review-level familiarity with Kotlin, Ktor, Micronaut, Python, FastAPI, TypeScript/Express, message brokers and event-driven systems is desirable. The Architect should be able to compare these with the project baselines, assess supportability and security implications, and avoid unnecessary technology proliferation.

Desired cloud, hardware and platform awareness

Strong familiarity with cloud-native architecture and the underlying operational building blocks: container orchestration, virtual machines, networking, identity federation, secrets management, PostgreSQL, cache/object storage, monitoring, CI/CD and artifact registries. Ability to design for on-premises, private-cloud or restricted-network deployments, including environment separation, infrastructure ownership, availability zones or sites, disaster recovery and operational access controls.

The Architect should be able to explain the full transaction path from browser and ingress through identity, API services, messaging and persistence; map trust boundaries and control ownership; identify single points of failure; and describe the evidence required to demonstrate reliability, security and recoverability.

Experience

• Recommended minimum: ten years of professional software engineering or technical architecture experience.

• Preferred target: ten to fifteen years, including at least three years of end-to-end solution-design ownership.

• Demonstrable responsibility for taking a substantial, integration-heavy system from discovery and architecture through production release and operation.

• Experience in regulated financial services, public-sector delivery or comparable high-assurance environments is highly desirable.

• Working knowledge of TOGAF, including practical application of the Architecture Development Method (ADM), architecture viewpoints and architecture deliverables, is preferred; TOGAF certification is an advantage but not mandatory.

Soft skills

Strong technical judgement, structured problem-solving, concise written and verbal communication, stakeholder facilitation, negotiation, risk management, decision-making under uncertainty and the ability to convert incomplete business needs into clear, testable design decisions. Ability to collaborate constructively with Engineering Leads, product owners, security teams, infrastructure teams and external institutions.

BIG Plus

Experience architecting Government projects, regulated financial-market infrastructure or government-service integrations is a BIG Plus. Particularly relevant exposure includes API Setu, DigiLocker, government identity and authorization services, NIC/MeitY environments, GIGW conformity, STQC-related preparation, CERT-In-aligned security practices, and coordination with public-sector review, audit or approval stakeholders.