Solution Architect

Description

The company secures digital identities and data for banks, governments, mobile services and device makers, and more than 30,000 organizations use its technology to verify people and things, control access and encrypt data.

The Czech team has over 400 staff from 45 nationalities across 15 teams. Its work covers government agencies, banking, mobile services and IoT, with software embedded in payment cards, SIM cards, travel passes, eBanking devices, authentication tokens, MIM modules and ID documents such as ePassports, eID, eHealth cards and eDriving licences.

The company has 80,000 employees in 68 countries, and English is its official corporate language.

This Solution Architect role is based in Prague. You will set the technical direction and target architecture for secure, scalable IAM platforms and AI-native engineering, combining deep systems architecture work with hands-on leadership in agentic AI, AI coding agents and modern software delivery.

Responsibilities

• Own the target architecture and roadmap for IAM and AI-enabled platforms, in line with business strategy, Zero Trust, privacy, security and responsible AI.
• Design agentic AI systems that plan, call tools, collaborate and run multi-step workflows within set security and operational limits.
• Set guardrails for agent identity, least privilege, human approval, tool access, runtime isolation, context, observability, auditability and safe failure.
• Architect identity lifecycle, credentials, authorization, delegation, governance, audit and threat detection for human and non-human identities.
• Design identity capabilities for workforce, customer, partner, machine, workload and AI-agent identities, covering authentication, authorization, governance, adaptive access, threat detection and secure delegation.
• Lead AI-native engineering across requirements, architecture, coding, testing, reviews, documentation, deployment and operations.
• Use AI coding agents for repository analysis, implementation, refactoring, testing, debugging, code review, documentation and delivery automation.
• Govern AI-assisted development with approved-tool controls, data protection, output validation, secure review, provenance and traceability.
• Turn business outcomes into reference architectures, decision records, quality attributes, service objectives and implementation guardrails.
• Design resilient cloud-native, distributed, event-driven and API-first systems that are production-ready and cost-efficient.
• Lead architecture reviews, threat modelling, technical discovery, proofs of concept, build-versus-buy analysis and cross-functional decisions.
• Work with product, engineering, security, data, operations, compliance and legal teams to deliver secure, auditable, resilient solutions.
• Mentor architects and engineers, and produce clear, reusable guidance, threat models, diagrams, evaluations and runbooks.

Requirements

• Minimum requirement: hands-on experience designing and building agentic AI solutions with planning, tool calls, retrieval, context or memory, multi-step workflows, and human or policy controls.
• Minimum requirement: hands-on, daily use of AI coding agents for repository analysis, implementation, refactoring, testing, debugging, reviews, documentation or delivery automation.
• You must use and govern AI coding agents in real engineering workflows, and design agentic systems with bounded autonomy, traceability and enterprise-grade quality, security, privacy and compliance.
• 10+ years designing and delivering complex software platforms, including substantial architecture, technical leadership and cross-functional delivery.
• Experience governing AI-generated code through human review, automated tests, security scanning, secret and dependency checks, provenance and auditability.
• Strong generative AI knowledge: models, prompt and context engineering, retrieval, model and tool selection, evaluation, observability, cost and responsible AI.
• Practical understanding of agent risks: prompt injection, excessive agency, insecure tool use, data leakage, identity spoofing, supply-chain compromise and unsafe actions.
• Strong experience with cloud-native, distributed, multi-tenant systems, APIs, asynchronous messaging, containers, infrastructure as code, automated delivery and observability.
• Deep IAM knowledge: OAuth, OpenID Connect, SAML, SCIM, FIDO2/WebAuthn, passkeys, PKI, workload identity, secrets and policy-based authorization.
• Strong system design: domain and API design, resilience, consistency, scalability, performance, security, privacy, data architecture and operations.
• Hands-on skills across modern programming ecosystems, quality engineering, threat modelling, technical specifications, architecture decisions and reference implementations.
• Proven ability to influence stakeholders, lead technical decisions, mentor engineers and align product, engineering, security and operations.
• Bachelor's or Master's degree in a relevant discipline, or equivalent practical experience.
• Strong written and spoken English.
• Experience in IAM across customer or workforce identity, federation, SSO, MFA, passwordless access, lifecycle governance, privileged access and fine-grained authorization.
• Experience architecting identity, authorization, delegation and governance for AI agents and other non-human identities.
• Experience with secure agent-to-tool and agent-to-agent integration, including Model Context Protocol or similar approaches.
• Experience with specification-driven development, reusable AI workflows and organisation-wide AI-assisted engineering adoption.
• Experience evaluating, red-teaming, monitoring and responding to incidents involving generative or agentic AI systems.
• Experience with AI-enabled identity or security: adaptive access, behavioural analytics, threat detection, fraud, risk scoring or identity proofing.
• Experience designing model-agnostic AI platforms, enterprise knowledge integration, reusable agents and cost-aware model routing.
• Experience with software and AI supply-chain security, regulated platforms, or contributions to architecture communities, standards, publications or open source.

Conditions

The role is based in Prague.

Benefits

• The company's mobility policy lets thousands of employees each year build their careers at home or abroad, in their current field or in a new one.