Solution Architect

Location: Praha, Czechia

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billions of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

Thales in the Czech Republic employs over 400 people from 45 different nationalities. A total of 15 teams work on projects for government agencies, banking, mobile services and the Internet Of Things (IoT) technology. At the core of our business is the development of software which we configure and embed in a multitude of different devices and form factors. These include many kinds of payment cards, SIM cards, travel passes, secure eBanking devices, authentication tokens, machine identification modules (MIM), and secure ID documents including ePassports, eID and eHealth cards, as well as eDriving licenses. Because of the international environment surrounding us every day, it comes as no surprise that English is our official corporate language.

The Solution Architect, based in Praha, will define the technical vision and target architecture for secure, scalable IAM platforms and AI-native engineering capabilities. The role combines deep systems architecture expertise with hands-on leadership in agentic AI, AI coding agents, and modern software delivery.

The architect will design identity capabilities for workforce, customer, partner, machine, workload, and AI-agent identities, covering authentication, authorization, governance, adaptive access, threat detection, and secure delegation.

The role will lead AI-native practices across architecture, development, testing, security, deployment, and operations. The successful candidate must use and govern AI coding agents in real engineering workflows and design agentic systems with bounded autonomy, traceability, and enterprise-grade quality, security, privacy, and compliance.

Day in the Life of a Solution Architect:

• Own the target architecture and roadmap for IAM and AI-enabled platforms, aligned with business strategy, Zero Trust, privacy, security, and responsible AI.
• Architect identity, lifecycle, credential, authorization, delegation, governance, audit, and threat-detection capabilities for human and non-human identities.
• Design agentic AI systems that plan, use tools, collaborate, and execute multi-step workflows within defined security and operational boundaries.
• Define guardrails for agent identity, least privilege, human approval, tool access, runtime isolation, context, observability, auditability, and safe failure.
• Lead AI-native engineering across requirements, architecture, coding, testing, reviews, documentation, deployment, and operations.
• Use AI coding agents for repository analysis, implementation, refactoring, testing, debugging, code review, documentation, and delivery automation.
• Govern AI-assisted development through approved-tool controls, data protection, output validation, secure review, provenance, and traceability.
• Translate business outcomes into reference architectures, decision records, quality attributes, service objectives, and implementation guardrails.
• Architect resilient cloud-native, distributed, event-driven, and API-first systems with strong production readiness and cost efficiency.
• Lead architecture reviews, threat modeling, technical discovery, proofs of concept, build-versus-buy analysis, and cross-functional decisions.
• Partner with product, engineering, security, data, operations, compliance, and legal teams to deliver secure, auditable, resilient solutions.
• Mentor architects and engineers and produce clear, reusable architecture guidance, threat models, diagrams, evaluations, and runbooks.

Requirements:

• 10+ years designing and delivering complex software platforms, with substantial architecture, technical leadership, and cross-functional delivery responsibility.
• Minimum requirement: hands-on experience designing and building agentic AI solutions using planning, tool invocation, retrieval, context or memory, multi-step workflows, and human or policy controls.
• Minimum requirement: hands-on, day-to-day use of AI coding agents for repository analysis, implementation, refactoring, testing, debugging, reviews, documentation, or delivery automation.
• Experience governing AI-generated code through human review, automated testing, security scanning, secrets and dependency checks, provenance, and auditability.
• Strong generative AI knowledge covering models, prompt and context engineering, retrieval, model and tool selection, evaluation, observability, cost, and responsible AI.
• Practical understanding of agent risks, including prompt injection, excessive agency, insecure tool use, data leakage, identity spoofing, supply-chain compromise, and unsafe actions.
• Strong experience with cloud-native, distributed, multi-tenant systems, APIs, asynchronous messaging, containers, infrastructure as code, automated delivery, and observability.
• Deep IAM knowledge, including OAuth, OpenID Connect, SAML, SCIM, FIDO2/WebAuthn, passkeys, PKI, workload identity, secrets, and policy-based authorization.
• Strong system-design fundamentals across domain and API design, resilience, consistency, scalability, performance, security, privacy, data architecture, and operations.
• Hands-on capability across modern programming ecosystems, quality engineering, threat modeling, technical specifications, architecture decisions, and reference implementations.
• Proven ability to influence stakeholders, lead technical decisions, mentor engineers, and align product, engineering, security, and operations.
• Bachelor’s or Master’s degree in a relevant discipline, or equivalent practical experience.
• Strong written and spoken English communication skills.

Nice to have:

• Experience in IAM across customer or workforce identity, federation, SSO, MFA, passwordless access, lifecycle governance, privileged access, and fine-grained authorization.
• Experience architecting identity, authorization, delegation, and governance for AI agents and other non-human identities.
• Experience with secure agent-to-tool and agent-to-agent integration, including Model Context Protocol or equivalent approaches.
• Experience with specification-driven development, reusable AI workflows, and organization-wide AI-assisted engineering adoption.
• Experience evaluating, red-teaming, monitoring, and responding to incidents involving generative or agentic AI systems.
• Experience with AI-enabled identity or security capabilities, including adaptive access, behavioral analytics, threat detection, fraud, risk scoring, or identity proofing.
• Experience designing model-agnostic AI platforms, enterprise knowledge integration, reusable agents, and cost-aware model routing.
• Experience with software and AI supply-chain security, regulated platforms, or contributions to architecture communities, standards, publications, or open source.

Check out our Atmoskop- https://www.atmoskop.cz/en/nazory-na-zamestnavatele/3077450-thales-dis-czech-republic-s-r-o

At Thales we provide CAREERS and not only jobs. With Thales employing 80,000 employees in 68 countries our mobility policy enables thousands of employees each year to develop their careers at home and abroad, in their existing areas of expertise or by branching out into new fields. Together we believe that embracing flexibility is a smarter way of working. Great journeys start here, apply now!

Interested in finding out more about Thales and why you should join us?
Say HI* to new career opportunities.