Security Solution Architect

Talan; Málaga; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Long-term employment contract

Training and career development

Multicultural team & international项目

Job summary

Talan Spain is hiring a Senior Solution Architect with a strong focus on Security. You will design enterprise-grade security architectures aligned with client security frameworks, primarily AWS, and collaborate with CIB CTO Security, BaaS Security, CISO, and platform engineering teams.

Responsibilities include IAM strategy, PoCs, cloud migration security, and DevSecOps integration across lifecycles. Fluency in English is required; Spanish is a plus.

Qualifications

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English proficiency (Spanish is a plus).

Responsibilities

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on OAuth2, OpenID Connect, SAML 2.0, federation, and JWT/token-based architectures.
• Define IAM strategies for cloud-native environments, primarily AWS, with hybrid/multi-cloud considerations.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead PoCs to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives with secure target architectures.
• Embed security-by-design and DevSecOps across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns and blueprints for cross-region adoption.
• Stay current with AWS security services and evolving standards.

Skills

Solution Architecture

Security Architecture

IAM

OAuth2

OIDC

SAML

Federation

JWT

Cloud-native AWS

Identity Providers

Zero Trust

Encryption PKI TLS

Education

Postgraduate studies in Cybersecurity/Cloud Security/EA

Tools

AWS IAM

AWS KMS

WAF

Shield

Security Hub

API Gateway

EKS

Job description

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultantsin 21 countriesand a turnover of €850M, we are committed to delivering impactful, future-ready solutions.

Talan at a Glance

Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowermentto deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenuethis year.

Our Core Areas of Expertise

• Data & Technologies:We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
• Cloud & Application Services:We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
• Management & Innovation Consulting:We lead business and digital transformation initiativesthrough project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.

We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

Job Description

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:

• Client's approved security frameworks
• Enterprise governance and regulatory requirements
• Cloud-native best practices (primarily AWS)

You will act as a trusted security architecture advisor, working closely with:

• CIB CTO Security
• BaaS Security
• CISO
• Regional architecture and security teamsand platform engineering domains
• Devops team
• Solution Architect team

KEY RESPONSIBILITIES

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on:
  • OAuth2
  • OpenID Connect (OIDC)
  • SAML 2.0
  • Federated identity
  • JWT/token-based architectures
• Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
• Embed security-by-design and DevSecOps principles across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
• Stay current with AWS security services and evolving industry standards.

Qualifications

Mandatory Skills

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English profiency (Spanish is a plus).

Skills & Knowledge

• Deep understanding of authentication and authorization frameworks.
• Strong knowledge of enterprise Identity Providers and federation models.
• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc).
• Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
• Strong understanding of Zero Trust Architecture principles.
• Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
• Ability to produce clear, structured architecture documentation and security blueprints.

Nice to have:

• Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
• AWS Certified Solutions Architect – Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring frameworks.

Education:

• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.

Soft Skills:

• Strong communication and presentation abilities.
• Ability to influence across global and regional teams without direct authority.
• Strategic thinking with strong risk awareness.
• Leadership and mentoring capabilities.
• High adaptability in complex, regulated environments.

Additional Information

What do we offer you?

• Long term Employment contract
• Training and career development
• Possibility to be part of a multicultural team and work on international projects

If you are passionate about data, development & tech, we want to meet you!

Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).