Security Solution Architect

Company Description

Talan – Positive Innovation

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions.

Talan at a Glance

Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year.

Our Core Areas of Expertise

• Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
• Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
• Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies. We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

Job Description

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:

• Client's approved security frameworks
• Enterprise governance and regulatory requirements
• Multi-region/domain architectural consistency
• Cloud-native best practices (primarily AWS)

You will act as a trusted security architecture advisor, working closely with:

• CIB CTO Security
• BaaS Security
• CISO
• Regional architecture and security teams and platform engineering domains
• Devops team
• Solution Architect team

KEY RESPONSIBILITIES

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.

• Ensure multi-region/domain alignment of security patterns and architectural consistency.

• Design authentication and authorization models based on:

• OAuth2

• OpenID Connect (OIDC)

• SAML 2.0

• Federated identity

• JWT/token-based architectures

• Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.

• Collaborate with Security and Governance stakeholders to validate architectural decisions.

• Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.

• Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.

• Embed security-by-design and DevSecOps principles across solution lifecycles.

• Participate in architecture reviews, threat modeling, and risk assessments.

• Establish reusable security patterns, blueprints, and best practices for cross-region adoption.

• Stay current with AWS security services and evolving industry standards.

Qualifications

• Mandatory Skills

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.

• Proven experience designing security architectures in cloud-native environments (AWS preferred).

• Experience aligning architectures with enterprise-wide security frameworks.

• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.

• Experience contributing to cloud migration and modernization programs.

• Experience in regulated environments (financial services preferred).

• Advanced English profiency (Spanish is a plus).

• Skills & Knowledge

• Deep understanding of authentication and authorization frameworks.

• Strong knowledge of enterprise Identity Providers and federation models.

• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).

• Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.

• Strong understanding of Zero Trust Architecture principles.

• Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.

• Ability to produce clear, structured architecture documentation and security blueprints.

• Nice to have:

• Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).

• AWS Certified Solutions Architect – Professional or AWS Security Specialty.

• Experience with hybrid or multi-cloud governance models.

• Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).

• Knowledge of container and Kubernetes security.

• Exposure to observability and security monitoring frameworks.

• Education:

• Bachelor's degree

• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.

• Soft Skills:

• Strong communication and presentation abilities.

• Ability to influence across global and regional teams without direct authority.

• Strong stakeholder management skills.

• Strategic thinking with strong risk awareness.

• Leadership and mentoring capabilities.

• High adaptability in complex, regulated environments.

Additional Information

What do we offer you?

• Long term Employment contract
• Training and career development
• Possibility to be part of a multicultural team and work on international projects **If you are passionate about data, development & tech, we want to meet you!

Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).**