About the Role

Webnyay Private Limited is looking for an experienced Solution Architect to lead the architecture and technical design of a secure, scalable, on-premises enterprise platform for a public sector undertaking.

The ideal candidate will have extensive experience in enterprise architecture, BFSI or government projects, data centre and disaster recovery (DC/DR), high availability, cybersecurity, regulatory compliance, and enterprise integrations. The role requires close collaboration with development, AI/ML, infrastructure, security, and client teams to ensure successful implementation and production readiness.

Key Responsibilities

Architecture and Technical Design

- Own the High-Level Design (HLD), review all Low-Level Designs (LLDs), and drive bank sign-off within the first two weeks.
- Develop integration blueprints covering API contracts, authentication, data mapping, and error handling for all in-scope enterprise systems.
- Define infrastructure sizing and requirements for primary and disaster recovery data centres, including servers, operating systems, database licences, networking, SSL certificates, and firewall rules.
- Make and document key architectural decisions, including trade-offs involving security, scalability, performance, and delivery timelines.
- Establish architectural standards and ensure implementation aligns with approved designs.

High Availability, Performance and Disaster Recovery

- Design active-passive high availability across data centres and disaster recovery sites, including automated failover.
- Define and validate architecture against 99.95% uptime, RPO of 15 minutes, and RTO of 60 minutes.
- Lead quarterly disaster recovery drills and coordinate recovery planning with infrastructure and operations teams.
- Design for horizontal scaling, read replicas for reporting, asynchronous processing, and future-ready database sharding.
- Define observability standards, including health, latency and error dashboards, distributed tracing, and log forwarding to SIEM platforms using CEF/LEEF formats.

Security, Compliance and Governance

- Ensure architecture aligns with applicable bank security policies,



including ISSP and DPSC, the DPDP Act 2023, relevant RBI IT outsourcing and IT governance directions, and the Information Technology Act, 2000.
- Define security controls covering AES-256 encryption at rest, TLS 1.2 or higher in transit, role-based access control (RBAC), maker-checker workflows, multi-factor authentication (MFA), PII masking, and privileged identity/access management (PIM/PAM).
- Design immutable audit trails and regulatory data-retention policies, typically supporting 710 years of retention.
- Lead technical coordination for vulnerability assessment and penetration testing (VAPT), third-party security reviews, information systems audits, and RBI examinations.
- Own Software Bill of Materials (SBOM) and Cryptographic Bill of Materials (CBOM) requirements.

AI and Enterprise Integration Architecture

- Collaborate with the AI Engineer to design secure, self-hosted AI/LLM deployment, model serving, scaling, versioning, and workload isolation.
- Ensure sensitive bank data remains within the bank-controlled environment.
- Design auditability for AI-generated outputs, human decisions, and associated actions.
- Implement architectural controls for category-wise AI enablement and switch-off.
- Define integration patterns for enterprise identity, SIEM, PIM/PAM, and other third-party systems.

Required Skills and Qualifications

- B.E./B.Tech/M.Tech in Computer Science or an equivalent qualification.
- 12+ years of experience in software engineering, including at least 4 years in a Solution Architect or Enterprise Architect role.
- Proven experience designing on-premises enterprise platforms for BFSI, banking, or government clients.
- Solid expertise in DC/DR architecture, high availability, automated failover, disaster recovery, and business continuity.




- Deep understanding of three-tier and service-based architectures, API gateways, message queues, caching, and distributed systems.
- Working knowledge of Python/Django, React, and PostgreSQL, including replication, backup, and failover.
- Experience integrating enterprise identity systems such as Active Directory, LDAP, SAML, and OIDC.
- Experience integrating SIEM and privileged identity/access management systems.
- Strong knowledge of application security, infrastructure security, encryption, access control, and audit requirements.
- Experience taking enterprise systems through VAPT, information systems audits, and security assessments.
- Working knowledge of Indian BFSI regulations, including applicable RBI IT outsourcing and governance directions and the DPDP Act 2023.
- Excellent technical documentation, presentation, and stakeholder management skills.
- Ability to present and defend architecture decisions before bank IT, security, compliance, and audit teams.
- Willingness to work fully onsite in Pune during the 12-week implementation period and travel to Pune as required thereafter.

Good to Have

- Architecture certifications such as TOGAF or security certifications such as CISSP or CISA.
- Experience with core banking integrations, including Finacle.
- Familiarity with government grievance management platforms such as SPGRS or CPGRAMS.
- Experience deploying self-hosted AI/LLM workloads and planning GPU infrastructure capacity.
- Experience with on-premises containers and orchestration platforms such as Docker, Kubernetes, or OpenShift.
- Exposure to ISO 27001, STQC, or CERT-In audit processes.
- Experience preparing bank RFP responses, technical proposals, and technical bid documents.

What We Offer

- Architectural ownership of a flagship enterprise platform for a public sector undertaking.
- Direct collaboration with the founders and an opportunity to influence Webnyay's broader product architecture.
- An opportunity to work at the intersection of Generative AI, regulatory technology, cybersecurity, and consumer protection.

📌 Solution Architect (Pune)
🏢 Webnyay
📍 Pune