Security Solution Architect

Talan – Positive Innovation Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions. Talan at a Glance Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year. Our Core Areas of Expertise - Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI. - Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency. - Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications. As a  Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with: - Client's approved security frameworks - Enterprise governance and regulatory requirements - Multi-region/domain architectural consistency - Cloud-native best practices (primarily AWS)  You will act as a trusted security architecture advisor, working closely with: - CIB CTO Security - BaaS Security - CISO - Regional architecture and security teams  and platform engineering domains - Devops team - Solution Architect team  KEY RESPONSIBILITIES - Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards. - Ensure multi-region/domain alignment of security patterns and architectural consistency. - Design authentication and authorization models based on: - OAuth2 - OpenID Connect (OIDC) - SAML 2.0 - Federated identity - JWT/token-based architectures - Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios. - Collaborate with Security and Governance stakeholders to validate architectural decisions. - Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies. - Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps. - Embed security-by-design and DevSecOps principles across solution lifecycles. - Participate in architecture reviews, threat modeling, and risk assessments. - Establish reusable security patterns, blueprints, and best practices for cross-region adoption. - Stay current with AWS security services and evolving industry standards.  Mandatory Skills - 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM. - Proven experience designing security architectures in cloud-native environments (AWS preferred). - Experience aligning architectures with enterprise-wide security frameworks. - Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations. - Experience contributing to cloud migration and modernization programs. - Experience in regulated environments (financial services preferred). - Advanced English profiency (Spanish is a plus).  Skills & Knowledge - Deep understanding of authentication and authorization frameworks. - Strong knowledge of enterprise Identity Providers and federation models. - Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.). - Experience defining IAM strategies for multi-region/domain and hybrid cloud environments. - Strong understanding of Zero Trust Architecture principles. - Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS. - Ability to produce clear, structured architecture documentation and security blueprints.  Nice to have: - Security certifications (CISSP, CISM, CCSP, SABSA or equivalent). - AWS Certified Solutions Architect – Professional or AWS Security Specialty. - Experience with hybrid or multi-cloud governance models. - Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions). - Knowledge of container and Kubernetes security. - Exposure to observability and security monitoring frameworks.  Education: - Bachelor's degree  - Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.  Soft Skills: - Strong communication and presentation abilities. - Ability to influence across global and regional teams without direct authority. - Strong stakeholder management skills. - Strategic thinking with strong risk awareness. - Leadership and mentoring capabilities. - High adaptability in complex, regulated environments. What do we offer you? - Long term Employment contract - Training and career development  - Possibility to be part of a multicultural team and work on international projects If you are passionate about data, development & tech, we want to meet you! Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).