Security Solution Architect

Description

The role is a senior security-focused solution architect position. You will design and oversee secure enterprise-grade architectures that follow the client's approved security frameworks, enterprise governance and regulatory rules, consistent patterns across regions and domains, and cloud-native practice, mainly on AWS.

You will advise on security architecture and work closely with the CIB CTO Security team, BaaS Security, the CISO, regional architecture and security teams, platform engineering, the DevOps team and the Solution Architect team.

The company is an international consulting group focused on innovation and business transformation through technology. It has over 7,200 consultants in 21 countries, a turnover of €850M, and operates from Paris. Over the past 22 years it has built a strong presence in IT and consulting, and it is on track to reach €1 billion in revenue this year. Its core areas are data and technologies, cloud and application services, and management and innovation consulting, and it works with major clients in transport and logistics, financial services, energy and utilities, retail, and media and telecommunications.

Responsibilities

• Define end-to-end security architectures that match Santander Group security frameworks and standards.
• Keep security patterns aligned and architecture consistent across regions and domains.
• Design authentication and authorization models using OAuth2, OpenID Connect (OIDC), SAML 2.0, federated identity, and JWT or token-based approaches.
• Define IAM strategies for cloud-native environments, mainly AWS, and make sure they work in hybrid or multi-cloud setups.
• Work with security and governance stakeholders to validate architecture decisions.
• Lead and run Proofs of Concept (PoCs) to test security models and new technologies.
• Help shape cloud migration and modernization work by defining secure target architectures and transition roadmaps.
• Build security-by-design and DevSecOps practices into every stage of the solution lifecycle.
• Take part in architecture reviews, threat modeling, and risk assessments.
• Create reusable security patterns, blueprints, and good practices for adoption across regions.
• Keep up with AWS security services and changing industry standards.

Requirements

• At least 5 years in solution architecture, with a strong focus on security architecture and IAM.
• Proven experience designing security architectures for cloud-native environments, AWS preferred.
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience with OAuth2, OIDC, SAML, federation, and enterprise identity provider integrations.
• Experience contributing to cloud migration and modernization programmes.
• Experience in regulated environments, financial services preferred.
• Advanced English. Spanish is a plus.
• Deep understanding of authentication and authorization frameworks.
• Strong knowledge of enterprise identity providers and federation models.
• Advanced knowledge of AWS security services, such as IAM, KMS, WAF, Shield, Security Hub, API Gateway, and EKS.
• Experience defining IAM strategies for multi-region, multi-domain, and hybrid cloud environments.
• Solid grasp of Zero Trust Architecture principles.
• Knowledge of encryption standards, PKI, certificate lifecycle management, and TLS/mTLS.
• Ability to produce clear, structured architecture documentation and security blueprints.
• Security certifications such as CISSP, CISM, CCSP, SABSA, or an equivalent.
• AWS Certified Solutions Architect, Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps practices and security controls for infrastructure as code, using Terraform, Ansible, or GitHub Actions.
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring frameworks.
• Bachelor's degree. A postgraduate degree or specialisation in cybersecurity, cloud security, or enterprise architecture is valued.
• Strong communication and presentation skills.
• Ability to influence global and regional teams without direct authority.
• Strong stakeholder management.
• Strategic thinking with good risk awareness.
• Leadership and mentoring ability.
• Comfortable adapting quickly in complex, regulated environments.

Conditions

Long-term employment contract.

The role is part of a multicultural team working on international projects.

The company Spain is committed to non-discrimination on grounds of gender, race, ideology, or any other reason, in line with its Equality Plan and Royal Decree-Law 6/2019 on gender equality.

Benefits

• Training and career development.