Java Solutions Architect (Java Runtime, Log4j, Tomcat Remediation)

Job description

We are looking for a Senior Java Solutions Architect to join a technical discovery and risk assessment engagement, working closely with a UK-based cybersecurity and architecture team on a large enterprise Java estate.

Project: A ten-week discovery and technical assessment engagement for a UK enterprise client, focused on mapping Java runtime usage and dependency risk across an estate of roughly 200 Java endpoints and close to 9,000 related findings.

Responsibilities:

- Build and maintain the Java runtime inventory, confirming actual usage across environments

- Identify components that are unused and removable, that require updating, or that require formal risk acceptance

- Confirm Log4j and Tomcat dependency chains and determine whether they share a common vendor product blocker

- Interpret Veracode Software Composition Analysis (SCA) output to produce an application bill of materials

- Confirm which applications genuinely bundle vulnerable components and assess whether the vulnerable code path is reachable

- Identify components with no direct upgrade path and define remediation options

- Collaborate with client-side architecture and security teams to validate findings and assumptions

Requirements:

- 7+ years of experience in Java platform engineering across multiple runtime generations and vendors (Oracle JDK/JRE, JRockit, OpenJDK, Azul, Corretto)

- Hands-on experience upgrading application servers and servlet containers, primarily Apache Tomcat; exposure to WebSphere is a plus

- Proven experience remediating Log4j/Log4Shell exposure in production, including cases where the component is embedded in a third-party product

- Experience resolving transitive dependency and classpath conflicts where the upgrade path is blocked by vendor versioning

- Familiarity with Veracode or a comparable software composition analysis tool

- Strong analytical mindset, able to work confidently with incomplete or conflicting source data

- Upper-Intermediate English or higher

What We Offer:

- Transparent strategy and thoughtful management that keep everyone aligned

- Space for personal growth and career development without limits

- A culture of continuous learning: internal courses, workshops, and English classes twice a week

- Skill up events where we share experience and stay on top of trends

- Competitive perks: flexible schedule, a strong compensation package, support for professional certifications, and generous vacation policy

- Team spirit that thrives through regular events, gatherings, and celebrations