Solution Architect

Agensi Pekerjaan Penta Consultancy Sdn. Bhd; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

Agensi Pekerjaan Penta Consultancy Sdn. Bhd in Kuala Lumpur seeks a skilled Solution Architect to design end-to-end architectures for digital insurance platforms and ensure security, compliance, and scalability across frontend, API gateways, and backend services.

You will lead architecture standards, collaborate with cross-functional teams, and guide development from design through production support, aiming for high availability and robust disaster recovery.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field, or equivalent professional experience.
• Proven experience as a Solution Architect in financial services or insurance environments.
• Strong expertise in modern application frameworks and architectures (React, Angular, Spring Boot, .NET Core, Node.js, microservices).
• Solid understanding of application security, including hands-on experience with penetration testing, vulnerability scanning, secure coding and secure API practices.
• Extensive experience with API Gateway platforms (Kong, Apigee, AWS API Gateway, Azure API Management).
• Knowledge of enterprise network architecture, including frontend-backend segregation, API gateway placement, load balancing, firewall configuration.

Responsibilities

• Design end-to-end architectures for digital insurance platforms (customer portals, agent systems, core backend).
• Enforce architecture standards complying with financial regulations, security, and compliance.
• Architect secure frontend-to-backend communications via API gateways for omnichannel access.
• Review network topologies including API gateways, load balancers, firewalls, DMZs, secure connections.
• Integrate secure coding and API security best practices (OWASP Top 10, OAuth2, JWT, mTLS).
• Assess findings from penetration tests, vulnerability assessments, and security audits with security teams.
• Collaborate with dev, infra, DevOps, security, risk to align with policies.
• Provide architectural guidance through development, testing, deployment, support.
• Evaluate technologies for high availability, resiliency, disaster recovery.
• Create and maintain architecture docs including designs, diagrams, security models.

Skills

Solution architecture

React

Angular

Spring Boot

.NET Core

Node.js

Microservices

Application security

Penetration testing

Vulnerability scanning

Secure coding

Secure API practices

Education

Bachelor's degree in Computer Science or related

Tools

Kong

Apigee

AWS API Gateway

Azure API Management

Job description

• Design comprehensive end-to-end solution architectures for digital insurance platforms, encompassing customer portals, agent systems, and core backend services.
• Establish and enforce architecture standards that adhere to financial services regulations, security protocols, and compliance requirements.
• Architect secure and scalable frontend-to-backend communications using API gateways, enabling omnichannel access across web, mobile, and partner integrations.
• Design and review network topologies, including API gateways, load balancers, firewalls, DMZs, and secure connections to internal and external systems.
• Integrate application and API security best practices into solution designs, covering:
  • OWASP Top 10
  • Secure API protocols (OAuth2, OpenID Connect, JWT, mTLS)
  • Data encryption both in transit and at rest
• Assess and address findings from penetration tests, vulnerability assessments, and security audits in collaboration with security teams.
• Work closely with development, infrastructure, DevOps, security, and risk teams to ensure solutions align with enterprise policies and regulatory expectations.
• Provide architectural guidance throughout development, testing, deployment, and production support phases.
• Evaluate and recommend technologies, frameworks, and platforms that support high availability, resiliency, and disaster recovery.
• Create and maintain architecture documentation, including solution designs, integration diagrams, and security models.
  

Job Requirements:

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Proven experience as a Solution Architect or Technical Architect within financial services or insurance environments.
• Strong expertise in modern application frameworks and architectures, such as React, Angular, Spring Boot, .NET Core, Node.js, and microservices.
• Solid understanding of application security, including hands-on experience with:
  • Penetration test remediation
  • Vulnerability scanning analysis
  • Secure coding and secure API practices
• Extensive experience with API Gateway platforms, e.g., Kong, Apigee, AWS API Gateway, or Azure API Management.
• In-depth knowledge of enterprise network architecture, including:
  • Frontend-backend segregation
  • API gateway placement
  • Load balancing, firewall configuration, and secure connectivity
• Familiarity with insurance systems, sensitive data handling, and regulatory compliance (e.g., data protection, auditability, resiliency).
• Experience with cloud platforms (AWS, Azure, or GCP) and hybrid architectures is a plus.
• Exposure to CI/CD pipelines and DevSecOps practices is preferred.
  
• Strong analytical and problem-solving abilities with a risk-conscious mindset.
• Excellent communication skills, capable of translating complex technical concepts into business-relevant discussions.
• Ability to influence architecture decisions across cross-functional teams without direct authority.
• High accountability and ownership in a regulated enterprise environment.
• Collaborative, proactive, and able to balance innovation with compliance.
• Proficient in documentation, presentations, and stakeholder management.
  

Added Advantages:

• Experience with LLMOps or AI/ML platform architecture, including:
  • Deployment and governance of large language models in enterprise settings
  • Secure integration of LLMs with APIs and backend systems
  • Model monitoring, version control, and risk management (e.g., data privacy, hallucination mitigation)
• Knowledge of responsible AI principles, particularly in regulated financial services contexts.