Security Solution Architect

Description

You will design and oversee secure, enterprise-grade architectures that follow the client's approved security frameworks, enterprise governance and regulatory rules, and a consistent pattern across regions and domains, with a cloud-native focus on AWS.

You will advise on security architecture as a trusted adviser to the CIB CTO Security, BaaS Security, CISO, regional architecture and security teams, platform engineering, the DevOps team and the Solution Architect team.

The company is an international consulting group with over 7,200 consultants in 21 countries, a turnover of €850M, and headquarters in Paris. It has operated for 22 years and expects to reach €1 billion in revenue this year. Its work covers data and technology, cloud and application services, and management and innovation consulting, for clients in transport and logistics, financial services, energy and utilities, retail, and media and telecoms.

The role is for a Senior Solution Architect with a security focus, based in the company's Spanish entity.

Responsibilities

• Define end-to-end security architectures that match the group's security frameworks and standards.
• Keep security patterns aligned and consistent across regions and domains.
• Design authentication and authorization models using OAuth2, OpenID Connect (OIDC), SAML 2.0, federated identity, and JWT or token-based approaches.
• Define IAM strategies for cloud-native environments, mainly AWS, that also work in hybrid or multi-cloud setups.
• Validate architecture decisions with security and governance stakeholders.
• Lead and run proofs of concept to test security models and new technologies.
• Support cloud migration and modernisation work by defining secure target architectures and transition roadmaps.
• Build security-by-design and DevSecOps practices into every stage of the solution lifecycle.
• Take part in architecture reviews, threat modelling, and risk assessments.
• Create reusable security patterns, blueprints, and good practices for use across regions.
• Keep up with AWS security services and changing industry standards.

Requirements

• Mandatory: 5+ years in solution architecture, with a strong background in security architecture and IAM.
• Mandatory: proven experience designing security architectures for cloud-native environments, preferably AWS.
• Mandatory: experience aligning architectures with enterprise-wide security frameworks.
• Mandatory: hands-on work implementing OAuth2, OIDC, SAML, federation, and enterprise identity provider integrations.
• Mandatory: experience supporting cloud migration and modernisation programmes.
• Mandatory: experience in regulated environments, financial services preferred.
• Mandatory: advanced English. Spanish is a plus.
• Mandatory: deep knowledge of authentication and authorization frameworks.
• Mandatory: strong knowledge of enterprise identity providers and federation models.
• Mandatory: advanced knowledge of AWS security services such as IAM, KMS, WAF, Shield, Security Hub, API Gateway and EKS.
• Mandatory: experience defining IAM strategies for multi-region, multi-domain, and hybrid cloud environments.
• Mandatory: solid understanding of Zero Trust Architecture principles.
• Mandatory: knowledge of encryption standards, PKI, certificate lifecycle management, and TLS/mTLS.
• Mandatory: ability to write clear, structured architecture documents and security blueprints.
• Security certifications such as CISSP, CISM, CCSP, SABSA, or equivalent.
• AWS Certified Solutions Architect Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps and security controls for infrastructure as code, using Terraform, Ansible, or GitHub Actions.
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring tools.
• A bachelor's degree is required. Postgraduate study or a specialisation in cybersecurity, cloud security, or enterprise architecture is valued.
• Strong communication and presentation skills.
• Ability to influence global and regional teams without direct authority.
• Strong stakeholder management.
• Strategic thinking with a clear sense of risk.
• Leadership and mentoring ability.
• Comfort adapting to complex, regulated environments.

Conditions

Long-term employment contract.

The company is an equal opportunity employer and does not discriminate on gender, race, ideology, or any other basis, in line with its Equality Plan and Royal Decree-Law 6/2019.

Benefits

• Training and career development.
• Work in a multicultural team on international projects.