As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:
- Client's approved security frameworks
- Enterprise governance and regulatory requirements
- Multi-region/domain architectural consistency
- Cloud-native best practices (primarily AWS)
You will act as a trusted security architecture advisor, working closely with:
- CIB CTO Security
- BaaS Security
- CISO
- Regional architecture and security teams and platform engineering domains
- Devops team
- Solution Architect team
KEY RESPONSIBILITIES
- Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
- Ensure multi-region/domain alignment of security patterns and architectural consistency.
- Design authentication and authorization models based on:
- OAuth2
- OpenID Connect (OIDC)
- SAML 2.0
- Federated identity
- JWT/token-based architectures
- Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
- Collaborate with Security and Governance stakeholders to validate architectural decisions.
- Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
- Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
- Embed security-by-design and DevSecOps principles across solution lifecycles.
- Participate in architecture reviews, threat modeling, and risk assessments.
- Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
- Stay current with AWS security services and evolving industry standards.
Mandatory Skills
- 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
- Proven experience designing security architectures in cloud-native environments (AWS preferred).
- Experience aligning architectures with enterprise-wide security frameworks.
- Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
- Experience contributing to cloud migration and modernization programs.
- Experience in regulated environments (financial services preferred).
- Advanced English profiency (Spanish is a plus).
Skills & Knowledge
- Deep understanding of authentication and authorization frameworks.
- Strong knowledge of enterprise Identity Providers and federation models.
- Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).
- Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
- Strong understanding of Zero Trust Architecture principles.
- Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
- Ability to produce clear, structured architecture documentation and security blueprints.
Nice to have:
- Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
- AWS Certified Solutions Architect – Professional or AWS Security Specialty.
- Experience with hybrid or multi-cloud governance models.
- Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).
- Knowledge of container and Kubernetes security.
- Exposure to observability and security monitoring frameworks.
Education:
- Bachelor's degree
- Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.
Soft Skills:
- Strong communication and presentation abilities.
- Ability to influence across global and regional teams without direct authority.
- Strong stakeholder management skills.
- Strategic thinking with strong risk awareness.
- Leadership and mentoring capabilities.
- High adaptability in complex, regulated environments.
What do we offer you?
- Long term Employment contract
- Training and career development
- Possibility to be part of a multicultural team and work on international projects
If you are passionate about data, development & tech, we want to meet you!
Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).