You will act as a trusted security architecture advisor working closely with:
- CIB CTO Security
- BaaS Security
- CISO
- Regional architecture and security teams and platform engineering domains
- Devops team
- Solution Architect team
KEY RESPONSIBILITIES
- Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
- Ensure multi-region/domain alignment of security patterns and architectural consistency.
- Design authentication and authorization models based on:
- OAuth2
- OpenID Connect (OIDC)
- SAML 2.0
- Federated identity
- JWT/token-based architectures
- Define IAM strategies for cloud-native environments primarily AWS while ensuring compatibility with hybrid or multi-cloud scenarios.
- Collaborate with Security and Governance stakeholders to validate architectural decisions.
- Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
- Contribute to cloud migration and modernization initiatives defining secure target architectures and transition roadmaps.
- Embed security-by-design and DevSecOps principles across solution lifecycles.
- Participate in architecture reviews threat modeling and risk assessments.
- Establish reusable security patterns blueprints and best practices for cross-region adoption.
- Stay current with AWS security services and evolving industry standards.
Qualifications :
Mandatory Skills
- 5 years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
- Proven experience designing security architectures in cloud-native environments (AWS preferred).
- Experience aligning architectures with enterprise-wide security frameworks.
- Hands-on experience implementing OAuth2 OIDC SAML federation and enterprise IdP integrations.
- Experience contributing to cloud migration and modernization programs.
- Experience in regulated environments (financial services preferred).
- Advanced English profiency (Spanish is a plus).
Skills & Knowledge
- Deep understanding of authentication and authorization frameworks.
- Strong knowledge of enterprise Identity Providers and federation models.
- Advanced knowledge of AWS security services (IAM KMS WAF Shield Security Hub API Gateway EKS etc.).
- Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
- Strong understanding of Zero Trust Architecture principles.
- Knowledge of encryption standards PKI certificate lifecycle management TLS/mTLS.
- Ability to produce clear structured architecture documentation and security blueprints.
Nice to have:
- Security certifications (CISSP CISM CCSP SABSA or equivalent).
- AWS Certified Solutions Architect Professional or AWS Security Specialty.
- Experience with hybrid or multi-cloud governance models.
- Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform Ansible Github actions).
- Knowledge of container and Kubernetes security.
- Exposure to observability and security monitoring frameworks.
Education:
- Bachelors degree
- Postgraduate studies or specialization in Cybersecurity Cloud Security or Enterprise Architecture are valued.
Soft Skills:
- Strong communication and presentation abilities.
- Ability to influence across integral and regional teams without direct authority.
- Strong stakeholder management skills.
- Strategic thinking with strong risk awareness.
- Leadership and mentoring capabilities.
- High adaptability in complex regulated environments.
Additional Information :
What do we offer you
- Long term Employment contract
- Training and career development
- Possibility to be part of a multicultural team and work on international projects
If you are passionate about data development & tech we want to meet you!
Talan Spains commitment to non-discrimination based on gender race ideology or any other reason in accordance with the companys Equality Plan and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).