Solution Architect Job Vacancy at CRDB Bank PLC – November 2026

Organization: CRDB Bank PLC – Benki ya CRDB

Location: Tanzania Head Office

Category: Engineering / Information Technology

Job Type: Full-Time

Application Deadline: 22 November 2026

CRDB Bank PLC is inviting applications from qualified and experienced professionals for the position of Solution Architect at its Tanzania Head Office.

Job Purpose

The Solution Architect will transform approved business and technical solution requirements into secure, scalable, resilient, maintainable and implementation-ready solution architectures aligned with the Bank’s enterprise architecture, technology strategy and engineering standards.

The role provides end-to-end technical architecture leadership across applications, microservices, APIs, enterprise integrations, data, security, identity, platforms, cloud and container environments, DevSecOps, observability and operational resilience.

The successful candidate will own the complete solution architecture lifecycle, covering:

• Validated Solution Definition
• Architecture Options and Decisions
• High-Level Design (HLD)
• Low-Level Design (LLD)
• Implementation-Ready Architecture
• Architecture Review and Approval
• Engineering Handover
• Implementation Assurance
• Architecture Change Control

This is a hands-on architecture and engineering leadership position requiring the ability to make and defend technical decisions based on business requirements, architectural principles, engineering trade-offs, security, resilience, cost, operational complexity and long-term technology strategy.

Key Responsibilities

1. Solution Architecture and Design

• Own end-to-end technical architecture for assigned initiatives, from validated solution requirements through implementation and production readiness.
• Develop and objectively evaluate architecture alternatives, considering business value, complexity, security, resilience, scalability, maintainability, cost, technology maturity and strategic alignment.
• Establish and document significant technical decisions through Architecture Decision Records (ADRs) and other approved governance mechanisms, including rationale, alternatives, trade-offs and consequences.
• Produce High-Level Designs (HLDs) defining system context, architectural boundaries, major components, integrations, security zones, data flows, platforms, external dependencies and deployment topology.
• Develop detailed Low-Level Designs (LLDs) covering components, interfaces, APIs, events, queues, persistence, state management, failure handling, security controls, deployment, observability and runtime behaviour.

2. Application and Integration Architecture

• Define appropriate application architecture, including modular monoliths, microservices, event-driven architectures, distributed systems and micro-frontends, based on justified requirements rather than technology preferences.
• Define integration boundaries, APIs, Enterprise Service Bus (ESB) and API Gateway usage, synchronous and asynchronous patterns, messaging, events, orchestration, choreography, service contracts, retries, idempotency, reconciliation and failure handling.
• Govern API and service boundaries, contracts, versioning, security, lifecycle, reuse, interoperability and backward compatibility.
• Define data and persistence architecture, including transactional boundaries, relational and NoSQL database selection, caching, data consistency, ownership, replication, Change Data Capture (CDC) and alignment with enterprise data standards.

3. Security and Resilience Architecture

• Translate security requirements into architecture covering Identity and Access Management (IAM), OAuth2/OIDC, authorization, service identities, TLS/mTLS, encryption, secrets, network boundaries, API security, auditability and zero-trust principles.
• Design solutions for high availability, fault tolerance, timeouts, retries, circuit breakers, bulkheads, idempotency, graceful degradation, recovery, reconciliation and disaster scenarios.
• Ensure solutions meet applicable security, engineering and regulatory requirements.

4. Platform, Deployment and DevSecOps Architecture

• Define how solutions will be deployed and operated across Kubernetes/container platforms, cloud and on-premises environments, middleware, databases, messaging infrastructure and other runtime platforms.
• Ensure architectures support Git-based source management, CI/CD, automated testing, security scanning, artifact management, infrastructure automation and controlled deployment practices.
• Define observability requirements covering logging, metrics, distributed tracing, correlation, dashboards, alerting and telemetry using the Bank’s enterprise observability capabilities.
• Translate approved Non-Functional Requirements (NFRs) into measurable architectural mechanisms addressing availability, performance, scalability, capacity, security, resilience, recoverability and maintainability.

5. Architecture Governance and Implementation Assurance

• Conduct formal architecture and design reviews to determine whether solutions comply with approved principles, standards, reference architectures and engineering requirements before implementation.
• Conduct technical architecture walkthroughs with Software Engineering, Integration Engineering, Platform/DevOps, Quality Engineering (QE), Security and relevant delivery teams.
• Remain actively engaged during development to verify that implementation conforms to the approved architecture and that significant architectural decisions are correctly implemented.
• Review material implementation changes and prevent uncontrolled deviations from approved architecture.
• Ensure architecture deviations are documented, assessed and formally approved through architecture governance.
• Evaluate architecture exceptions, establish compensating controls where required and ensure accepted architectural debt is recorded, assigned ownership, prioritised and time-bound.

6. Architecture Quality and Operational Readiness

• Define measurable architecture fitness functions that can increasingly be automated through CI/CD to verify security, resilience, performance, dependency, API and architectural compliance.
• Ensure architecture addresses monitoring, supportability, capacity, recovery, backup and disaster recovery, reconciliation, operational procedures and production failure scenarios before release.
• Identify reusable architectural patterns, services, APIs and components and contribute them to the Bank’s reference architecture and engineering standards.
• Provide technical leadership to Solution Architects, Solution Analysts and engineering teams through reviews, coaching and knowledge sharing.

Qualifications and Experience

Applicants must meet the following requirements:

• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, Computer Engineering or another relevant technical discipline.
• At least 3 years of experience performing solution architecture, technical architecture, technical design or senior engineering leadership responsibilities.
• Minimum 8 years of experience with strong hands-on software engineering or application development experience.

Professional Certifications

Technical certifications in the following areas will be an added advantage:

• TOGAF or other recognised architecture certifications.
• Java with Spring.
• Kubernetes CKAD/CKA.
• Cloud Architecture.
• WSO2 and API Management.
• DevOps and DevSecOps.
• Security Architecture.

Technical Knowledge and Competencies

1. Observability and Monitoring

• OpenTelemetry.
• Metrics, logs and distributed tracing.
• Prometheus, Grafana, Jaeger, Sentry or equivalent tools.
• Service Level Indicators (SLIs) and Service Level Objectives (SLOs).
• Operational monitoring and production troubleshooting.

2. Infrastructure, Platforms and DevOps

• Kubernetes, Docker and container technologies.
• Linux administration.
• Cloud and on-premises architecture.
• Git/GitLab and CI/CD.
• Jenkins, GitLab CI or equivalent tools.
• Artifact repositories.
• Infrastructure as Code (IaC).
• Configuration and secrets management.
• Deployment strategies.
• DevSecOps and platform engineering.

3. Database and Data Architecture

• Relational databases, preferably Oracle, PostgreSQL or equivalent.
• SQL, NoSQL and NewSQL concepts.
• Database transactions and audit history.
• Data modelling and data consistency.
• Database integration and caching technologies such as Redis.
• Data migration and ACID transactions.
• Distributed data and Change Data Capture (CDC).
• Messaging, event/data management, data lifecycle and data integrity.

4. Security Architecture

• Identity and Access Management (IAM).
• OAuth2, OpenID Connect and JSON Web Tokens (JWT).
• Authentication and authorisation.
• Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
• Zero-trust architecture and API security.
• TLS/mTLS, encryption, secrets and keys management.
• Secure coding principles and vulnerability management.
• Secure Software Development Lifecycle (Secure SDLC).
• Threat modelling and security architecture.
• Audit logging and regulatory/security controls.

Equal Employment Opportunity

CRDB Bank is committed to upholding sustainability and Environmental, Social and Governance (ESG) practices. The Bank promotes an inclusive workplace and encourages applications from women and persons with disabilities.

Important Notice: CRDB Bank does not charge any fees for the application or recruitment process. Applicants should disregard any requests for payment, as these do not represent the Bank’s recruitment practices.

Only shortlisted candidates will be contacted.

How to Apply

Interested candidates should submit their applications online through the official CRDB Bank PLC careers portal.

Application Deadline: 22 November 2026

CLICK HERE TO APPLY