Security Solution Architect

Talan; Porto; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Long term Employment contract

Training and career development

International project exposure

Job summary

Talan seeks a Senior Solution Architect with a security focus to design and govern secure enterprise-grade architectures aligned with client security frameworks and regulatory requirements. You will lead IAM strategies and ensure multi-region architectural consistency across cloud-native environments, primarily AWS.

You will collaborate with CIB CTO Security, BaaS Security, CISO, and regional teams, driving PoCs and secure target roadmaps while embedding security-by-design and DevSecOps across

Qualifications

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English proficiency (Spanish is a plus).

Responsibilities

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on OAuth2, OIDC, SAML, federation, and JWT/token-based architectures.
• Define IAM strategies for cloud-native environments, primarily AWS, with hybrid or multi-cloud compatibility.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead PoCs to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives with secure target architectures.
• Embed security-by-design and DevSecOps across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns and blueprints for cross-region adoption.
• Stay current with AWS security services and industry standards.

Skills

Security Architecture

IAM

OAuth/OIDC

SAML

Cloud Migration

Regulated Environments

English Proficiency

Education

Postgraduate in Cybersecurity / Cloud Security / Enterprise Architecture

Tools

AWS

KMS

WAF

Shield

Security Hub

API Gateway

EKS

Job description

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultantsin 21 countriesand a turnover of €850M, we are committed to delivering impactful, future-ready solutions.

Talan at a Glance

Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowermentto deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenuethis year.

Our Core Areas of Expertise

• Data & Technologies:We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
• Cloud & Application Services:We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
• Management & Innovation Consulting:We lead business and digital transformation initiativesthrough project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.

We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

Job Description

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:

• Client's approved security frameworks
• Enterprise governance and regulatory requirements
• Cloud-native best practices (primarily AWS)

You will act as a trusted security architecture advisor, working closely with:

• CIB CTO Security
• BaaS Security
• CISO
• Regional architecture and security teamsand platform engineering domains
• Devops team
• Solution Architect team

KEY RESPONSIBILITIES

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on:
  • OAuth2
  • OpenID Connect (OIDC)
  • SAML 2.0
  • Federated identity
  • JWT/token-based architectures
• Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
• Embed security-by-design and DevSecOps principles across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
• Stay current with AWS security services and evolving industry standards.

Qualifications

Mandatory Skills

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English profiency (Spanish is a plus).

Skills & Knowledge

• Deep understanding of authentication and authorization frameworks.
• Strong knowledge of enterprise Identity Providers and federation models.
• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc).
• Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
• Strong understanding of Zero Trust Architecture principles.
• Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
• Ability to produce clear, structured architecture documentation and security blueprints.

Nice to have:

• Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
• AWS Certified Solutions Architect – Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring frameworks.

Education:

• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.

Soft Skills:

• Strong communication and presentation abilities.
• Ability to influence across global and regional teams without direct authority.
• Strategic thinking with strong risk awareness.
• Leadership and mentoring capabilities.
• High adaptability in complex, regulated environments.

Additional Information

What do we offer you?

• Long term Employment contract
• Training and career development
• Possibility to be part of a multicultural team and work on international projects

If you are passionate about data, development & tech, we want to meet you!

Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).