Java Solutions Architect (Java Runtime, Log4j, Tomcat Remediation)
Summary
Senior Java Solutions Architect for a 10-week discovery and risk assessment engagement with a UK cybersecurity/architecture team, mapping Java runtime usage and dependency risk across ~200 Java enterprise endpoints. Day-to-day: build a Java runtime inventory, confirm Log4j/Tomcat dependency chains, interpret Veracode SCA output, and define remediation options.
We are looking for a Senior Java Solutions Architect to join a technical discovery and risk assessment engagement, working closely with a UK-based cybersecurity and architecture team on a large enterprise Java estate.
Project: A ten-week discovery and technical assessment engagement for a UK enterprise client, focused on mapping Java runtime usage and dependency risk across an estate of roughly 200 Java endpoints and close to 9,000 related findings.
Responsibilities:
Build and maintain the Java runtime inventory, confirming actual usage across environments
Identify components that are unused and removable, that require updating, or that require formal risk acceptance
Confirm Log4j and Tomcat dependency chains and determine whether they share a common vendor product blocker
Interpret Veracode Software Composition Analysis (SCA) output to produce an application bill of materials
Confirm which applications genuinely bundle vulnerable components and assess whether the vulnerable code path is reachable
Identify components with no direct upgrade path and define remediation options
Collaborate with client-side architecture and security teams to validate findings and assumptions
Requirements:
7+ years of experience in Java platform engineering across multiple runtime generations and vendors (Oracle JDK/JRE, JRockit, OpenJDK, Azul, Corretto)
Hands-on experience upgrading application servers and servlet containers, primarily Apache Tomcat; exposure to WebSphere is a plus
Proven experience remediating Log4j/Log4Shell exposure in production, including cases where the component is embedded in a third-party product
Experience resolving transitive dependency and classpath conflicts where the upgrade path is blocked by vendor versioning
Familiarity with Veracode or a comparable software composition analysis tool
Strong analytical mindset, able to work confidently with incomplete or conflicting source data
Upper-Intermediate English or higher
What We Offer:
Transparent strategy and thoughtful management that keep everyone aligned
Space for personal growth and career development without limits
A culture of continuous learning: internal courses, workshops, and English classes twice a week
Skill up events where we share experience and stay on top of trends
Competitive perks: flexible schedule, a strong compensation package, support for professional certifications, and generous vacation policy
Team spirit that thrives through regular events, gatherings, and celebrations