Security Solution Architect

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:

• Client's approved security frameworks
• Enterprise governance and regulatory requirements
• Multi-region/domain architectural consistency
• Cloud-native best practices (primarily AWS)

You will act as a trusted security architecture advisor, working closely with:

• CIB CTO Security
• BaaS Security
• CISO
• Regional architecture and security teams and platform engineering domains
• Devops team
• Solution Architect team

KEY RESPONSIBILITIES

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on:
  • OAuth2
  • OpenID Connect (OIDC)
  • SAML 2.0
  • Federated identity
  • JWT/token-based architectures
• Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
• Embed security-by-design and DevSecOps principles across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
• Stay current with AWS security services and evolving industry standards.

Mandatory Skills

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English profiency (Spanish is a plus).

Skills & Knowledge

• Deep understanding of authentication and authorization frameworks.
• Strong knowledge of enterprise Identity Providers and federation models.
• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).
• Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
• Strong understanding of Zero Trust Architecture principles.
• Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
• Ability to produce clear, structured architecture documentation and security blueprints.

Nice to have:

• Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
• AWS Certified Solutions Architect – Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring frameworks.

Education:

• Bachelor's degree
• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.

Soft Skills:

• Strong communication and presentation abilities.
• Ability to influence across global and regional teams without direct authority.
• Strong stakeholder management skills.
• Strategic thinking with strong risk awareness.
• Leadership and mentoring capabilities.
• High adaptability in complex, regulated environments.

What do we offer you?

• Long term Employment contract
• Training and career development
• Possibility to be part of a multicultural team and work on international projects

If you are passionate about data, development & tech, we want to meet you!

Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).