Job Description

We are seeking an experienced Solution Architect to lead the end-to-end architecture of the Cards Infrastructure Gateway-the foundational layer enabling secure, scalable, and resilient connectivity between card platforms (issuing/acquiring) and external/payment networks. You will own the solution blueprint across transaction routing, authorization, settlement interfaces, tokenization, HSM integrations, ISO 8583/ISO 20022 messaging, and API mediation, ensuring compliance with PCI DSS and bank-grade security, resilience, and observability standards.Scope & Ownership’.Hybrid working:The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time.Your Role:Domains: Card issuing & acquiring, payment gateways, authorization/clearing, tokenization & cryptography, merchant onboarding, fraud controls integration (e.g., ARIC), dispute/chargeback flows.Systems: Legacy card switches, orchestration layers, API gateways, MQ/event buses, HSMs, data stores, and cloud/on-prem hybrid infrastructure.Interfaces: ISO 8583, ISO 20022, REST/gRPC, file-based batch, SFTP, message queues (Kafka/RabbitMQ), payment network connectors (e.g., Visa/Mastercard).Your Skills:You should have experience withArchitecture & DesignDefine the target architecture for the Cards Infra Gateway: ingress/egress, API mediation, message transformation, routing, resilience, and observability patterns.Design high-throughput, low-latency transaction flows (authorization, capture, reversal, refund, settlement), including real-time and batch interfaces.Establish non-functional requirements (NFRs): performance SLAs, HA ( 99.99%), DR (RPO/RTO), scalability, security, compliance, and cost efficiency.Create solution blueprints (context/container/component diagrams), sequence diagrams, and data flow models.Security & ComplianceArchitect PCI DSS compliant solutions; enforce network segmentation, key management, mTLS, OAuth2, certificate lifecycle, and secrets management.Integrate HSMs for PIN, EMV, and token cryptography; design tokenization and PAN vault patterns with least privilege access.Align with regulatory requirements (e.g., GDPR, PSD2/SCA) and auditability (logging, traceability, data retention).