Software Architect

Location: Tel Aviv, Hybrid (IL)

Description

Tufin is the leader in network and cloud security policy automation. Our platform (TOS) helps the world's largest enterprises design, manage, and secure their network security policy across firewalls, cloud, and hybrid environments — at massive scale and under strict compliance and security requirements.

The team:

You'll join Tufin's *Architecture Group*, a small group of senior architects who own the technical direction across our products. We lead the design of major initiatives, are the first point of reference for R&D on security and cross-cutting technical concerns, and partner with engineering teams to turn hard problems into sound, maintainable designs.

As a Software Architect you will:

• Lead the architecture of significant features and initiatives — from concept and design through review to implementation, together with the owning teams.
• Make complexity and tradeoffs explicit, so teams and leadership can make well-informed technical decisions.
• Act as a technical advisor across R&D — the person teams consult on hard design questions and significant changes.
• Review designs for soundness, scalability, and security, and help raise the engineering bar across the organization.
• Help drive modernization, technical-debt reduction, and adoption of modern engineering and AI-assisted practices.
• Work with AI-assisted development tools as a matter of course — we expect our architects to use them heavily and effectively.

Our technology & domain:

• You'll work across a large, real-world production estate. Our core stack:
• Languages - Java (17, with an active upgrade path) and Kotlin; some **C/C++** components (device-facing).
• Frameworks & platform: Spring Framework / Spring Boot, Hibernate/JPA, Gradle; **GraalVM** native image for selected services.
• Architecture: distributed, service-oriented backend systems, with ongoing modernization.
• Data: relational databases (via JPA/Hibernate) and additional datastores.
• Domain: network security policy, firewall and device configuration/management, and the protocols, standards, and security concerns that underpin them.
• Ways of working: modern SDLC — CI/CD, automated testing, code review — and heavy, effective use of **AI-assisted development tools**.

You won't touch all of this on day one, but you should be comfortable operating in a large brownfield system where legacy and modernization coexist and decisions have long lifespans.

Requirements

• At least 8 years of professional software engineering experience.
• At least 5 years designing the architecture of non-trivial, production backend systems — as an architect, or as a senior/lead engineer owning system-level design.
• Proven experience architecting **large-scale, distributed, or enterprise-grade** systems.
• Solid command of the full **software development lifecycle** and modern engineering practices (CI/CD, testing, code review).
• Strong, hands-on experience with the **JVM ecosystem** — Java and/or Kotlin — and with **Spring / Spring Boot**.
• B.Sc. in Computer Science / Software Engineering — or equivalent hands-on experience.
• Professional fluency in **English**, written and verbal.

Advantages:

• Experience in **team-lead, tech-lead, or managerial** roles.
• Experience **modernizing legacy systems** and managing 3rd-party / framework lifecycle (major upgrades, EOL, CVEs).
• Experience with **relational databases** and ORM (JPA/Hibernate).
• Background in **cybersecurity, networking, or firewall / network-security** products.
• Familiarity with **microservices, event-driven design, GraalVM**, or performance/footprint optimization.
• Experience with **cloud / SaaS / multi-tenant** architectures and containers (Docker / Kubernetes).