Solution Architect

is a "hands-on" architect responsible for the structural integrity of a specific business domain. This role acts as the bridge between business requirements and technical execution, ensuring that solutions are not only functional but also secure, scalable, and compliant with the bank's "Golden Paths"

Core Responsibilities

• Architectural Artifacts: Serves as the primary author of the High-Level Design (HLD) andthe Architecture Definition Document (ADD) using arc42 standards

• System Modeling: Utilizes the C4 Model to create detailed component models anddocumentation that eliminate developer interpretation.

• Technical Governance: Ensures project-level "Gate" success and prevents localizedtechnical debt or security leaks.

• Design Precision: Defines System Building Blocks (SBBs) and formal API Specifications(OpenAPI/Swagger).

• Decision Management: Records all architectural trade-offs as Architecture DecisionRecords (ADRs) in a version-controlled repository.

Cloud & Container Technology

• Platform Expertise: Architectural design and management within OpenShift (OCP) and Kubernetes (K8s) environments.
• Secret & Key Management: Integration of Vault and Hardware Security Modules (HSM)for robust cryptographic operations and secret management.
• Service Mesh: Implementation of Istio for traffic management and securecommunication.
• Governance: Applying GitOps Governance and integrating security scanning into CI/CDpipelines.

Banking Security & Regulatory Standards

• Cyber Resilience: Alignment with the Bank of Thailand (BoT) Cyber ResilienceFramework to ensure systemic safety.

• Data Privacy (PDPA): Designing field-level encryption and masking for PersonallyIdentifiable Information (PII) to comply with PDPA regulations.

• Identity & Access: Enforcing Multi-Factor Authentication (MFA) and utilizing OIDC/OAuth2 and JWT (JWS/JWE) for secure identity.

• Audit Readiness: Acting as a technical contact for BoT IT Examinations and ensuring alldesign assets are ready for regulatory audit.

• Payment Standards: Knowledge of PCI-DSS for cardholder data security

Technical Skills & Patterns

• Microservices Patterns: Expertise in Database-per-service, Circuit Breaker, Sidecar, and Saga Patterns (Distributed Transactions)

• Messaging & Integration: Proficiency in Apache Kafka (ensuring Idempotency), gRPC,and REST (Level 3).

• Distributed Systems: Application of CAP Theorem and Event Sourcing in high-availability environments.

• Resilience: Implementing Strangler Fig patterns for legacy migration and automatedDisaster Recovery (DRP) plans.