Security Solution Architect

Description

The role is a senior security-focused solution architect position that designs and governs secure enterprise architectures across the group's frameworks, regulatory requirements, and cloud-native practices, primarily on AWS.

You will advise on security architecture while working with the CIB CTO Security, BaaS Security, the CISO, regional architecture and security teams, platform engineering, DevOps, and the Solution Architect team.

The company is an international consulting group focused on innovation and business transformation through technology. It has over 7,200 consultants in 21 countries, a turnover of €850M, and is headquartered in Paris. Over the past 22 years it has built a strong presence in IT and consulting, and it is on track to reach €1 billion in revenue this year.

Responsibilities

• Create end-to-end security architectures that follow Santander Group security frameworks and standards.
• Keep security patterns consistent across regions and domains.
• Design authentication and authorization models using OAuth2, OpenID Connect (OIDC), SAML 2.0, federated identity, and JWT or token-based approaches.
• Define IAM strategies for cloud-native environments, mainly AWS, that also work with hybrid or multi-cloud setups.
• Work with security and governance stakeholders to validate architecture decisions.
• Lead and run Proofs of Concept (PoCs) to test security models and new technologies.
• Help shape cloud migration and modernization work, including secure target architectures and transition roadmaps.
• Build security-by-design and DevSecOps practices into every stage of solution delivery.
• Take part in architecture reviews, threat modeling, and risk assessments.
• Create reusable security patterns, blueprints, and best practices that can be adopted across regions.
• Track AWS security services and changing industry standards.

Requirements

• You have 5+ years in solution architecture, with a strong focus on security architecture and IAM.
• You have designed security architectures in cloud-native environments, ideally on AWS.
• You have aligned architectures with enterprise-wide security frameworks.
• You have hands-on experience with OAuth2, OIDC, SAML, federation, and enterprise identity provider integrations.
• You have contributed to cloud migration or modernization programs.
• You have worked in regulated environments, preferably financial services.
• You have advanced English. Spanish is a plus.
• You have a deep understanding of authentication and authorization frameworks.
• You know enterprise identity providers and federation models well.
• You have advanced knowledge of AWS security services such as IAM, KMS, WAF, Shield, Security Hub, API Gateway, and EKS.
• You have defined IAM strategies for multi-region, multi-domain, and hybrid cloud environments.
• You understand Zero Trust Architecture principles well.
• You know encryption standards, PKI, certificate lifecycle management, and TLS/mTLS.
• You can produce clear, structured architecture documentation and security blueprints.
• You have security certifications such as CISSP, CISM, CCSP, SABSA, or an equivalent.
• You hold AWS Certified Solutions Architect, Professional or AWS Security Specialty.
• You have experience with hybrid or multi-cloud governance models.
• You have worked with DevSecOps practices and security controls for infrastructure as code (Terraform, Ansible, GitHub Actions).
• You know container and Kubernetes security.
• You have exposure to observability and security monitoring frameworks.
• You hold a bachelor's degree. A postgraduate degree or specialization in cybersecurity, cloud security, or enterprise architecture is valued.
• You communicate and present clearly and confidently.
• You influence global and regional teams without direct authority.
• You manage stakeholders well.
• You think strategically and are aware of risk.
• You lead and mentor others.
• You adapt well to complex, regulated environments.

Conditions

The contract is a long-term employment contract.

The role is part of a multicultural team working on international projects.

The company is committed to non-discrimination on gender, race, ideology, or any other ground, in line with its Equality Plan and Royal Decree-Law 6/2019.

Benefits

• Training and career development are provided.