Security Solution Architect

About the role

Talan, an international consulting group focused on innovation and business transformation through technology, is hiring a Security Solution Architect in A Coruña. You will design and govern secure, enterprise-grade architectures aligned with client-approved security frameworks, enterprise governance and regulatory requirements, multi-region consistency and cloud-native best practices (mainly AWS). You will advise the CIB CTO Security, BaaS Security, CISO, regional teams and platform engineering, DevOps and solution architect teams.

Key responsibilities

• Design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Define authentication and authorization models (OAuth2, OpenID Connect, SAML 2.0, federated identity, JWT/token-based architectures).
• Define IAM strategies for cloud-native environments, mainly AWS, compatible with hybrid or multi-cloud scenarios.
• Validate architectural decisions with Security and Governance stakeholders.
• Lead and run proofs of concept, contribute to cloud migration and modernization, and embed security-by-design and DevSecOps.
• Take part in architecture reviews, threat modeling and risk assessments, and establish reusable security patterns and blueprints.

Required profile

• 5+ years of solution architecture experience with a strong focus on security architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred) and aligning them with enterprise security frameworks.
• Hands-on experience with OAuth2, OIDC, SAML, federation and enterprise IdP integrations.
• Experience in cloud migration and modernization programs; regulated environments (financial services preferred).
• Bachelor's degree; postgraduate studies or specialization in cybersecurity, cloud security or enterprise architecture valued.
• Advanced English; Spanish is a plus.

Required skills

• Deep understanding of authentication and authorization frameworks and enterprise Identity Providers.
• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS).
• Zero Trust principles, encryption standards, PKI, TLS/mTLS.
• Nice to have: CISSP, CISM, CCSP, SABSA; AWS Certified Solutions Architect Professional or Security Specialty; Terraform, Ansible, GitHub Actions; Kubernetes security; observability and security monitoring.

What we offer

• Long-term employment contract.
• Training and career development.
• Work in a multicultural team on international projects.