Security Solution Architect

Company Description Talan

• Positive Innovation Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions. Talan at a Glance Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year. Our Core Areas of Expertise
• Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
• Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
• Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies. We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications. Job Description As a Senior Solution Architect
• Security Focus, you will design and govern secure enterprise-grade architectures aligned with:
• Client's approved security frameworks
• Enterprise governance and regulatory requirements
• Multi-region/domain architectural consistency
• Cloud-native best practices (primarily AWS) You will act as a trusted security architecture advisor, working closely with:
• CIB CTO Security
• BaaS Security
• CISO
• Regional architecture and security teams and platform engineering domains
• Devops team
• Solution Architect team KEY RESPONSIBILITIES
• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on:
• OAuth2
• OpenID Connect (OIDC)
• SAML 2.0
• Federated identity
• JWT/token-based architectures
• Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
• Embed security-by-design and DevSecOps principles across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
• Stay current with AWS security services and evolving industry standards. Qualifications Mandatory Skills
• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English profiency (Spanish is a plus). Skills & Knowledge
• Deep understanding of authentication and authorization frameworks.
• Strong knowledge of enterprise Identity Providers and federation models.
• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).
• Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
• Strong understanding of Zero Trust Architecture principles.
• Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
• Ability to produce clear, structured architecture documentation and security blueprints. Nice to have:
• Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
• AWS Certified Solutions Architect
• Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring frameworks. Education:
• Bachelor's degree
• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued. Soft Skills:
• Strong communication and presentation abilities.
• Ability to influence across global and regional teams without direct authority.
• Strong stakeholder management skills.
• Strategic thinking with strong risk awareness.
• Leadership and mentoring capabilities.
• High adaptability in complex, regulated environments. Additional Information What do we offer you?
• Long term Employment contract
• Training and career development
• Possibility to be part of a multicultural team and work on international projects If you are passionate about data, development & tech, we want to meet you! Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).

La oferta está publicada en el sitio de Talan. Abre la oferta original ↗ para enviar tu candidatura. Screeningpass no rellena formularios por ti.

Inicia una búsqueda de contacto desde esta página. Screeningpass te propone hasta tres personas vinculadas al puesto. Tú eliges a quién escribir y Screeningpass busca su correo profesional y prepara un mensaje. Lo revisas y lo envías tú con Gmail. No siempre hay una dirección de correo disponible y nunca se garantiza una respuesta.

Una búsqueda cuesta 1 crédito. Se te devuelve si la búsqueda falla. Al registrarte recibes 3 créditos, para hacer 3 búsquedas.

Screeningpass reúne ofertas de prácticas, formación dual y empleo publicadas por las empresas. Para una oferta, Screeningpass encuentra una persona con la que contactar en la empresa, busca su correo profesional y prepara un mensaje a partir de tu CV. Ver el funcionamiento en detalle.