Security Solution Architect

Location: Porto, Porto District, pt

Company Description

Talan – Positive Innovation

Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions.

Talan at a Glance

Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we’ve built a strong presence in the IT and consulting landscape, and we’re on track to reach €1 billion in revenue this year.

Our Core Areas of Expertise

• Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
• Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
• Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.

We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.

Job Description

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:

• Client's approved security frameworks
• Enterprise governance and regulatory requirements
• Multi-region/domain architectural consistency
• Cloud-native best practices (primarily AWS)

You will act as a trusted security architecture advisor, working closely with:

• CIB CTO Security
• BaaS Security
• CISO
• Regional architecture and security teams and platform engineering domains
• Devops team
• Solution Architect team

KEY RESPONSIBILITIES

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
• Ensure multi-region/domain alignment of security patterns and architectural consistency.
• Design authentication and authorization models based on:
  • OAuth2
  • OpenID Connect (OIDC)
  • SAML 2.0
  • Federated identity
  • JWT/token-based architectures
• Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
• Collaborate with Security and Governance stakeholders to validate architectural decisions.
• Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
• Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
• Embed security-by-design and DevSecOps principles across solution lifecycles.
• Participate in architecture reviews, threat modeling, and risk assessments.
• Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
• Stay current with AWS security services and evolving industry standards.

Qualifications

Mandatory Skills

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
• Proven experience designing security architectures in cloud-native environments (AWS preferred).
• Experience aligning architectures with enterprise-wide security frameworks.
• Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments (financial services preferred).
• Advanced English profiency (Spanish is a plus).

Skills & Knowledge

• Deep understanding of authentication and authorization frameworks.
• Strong knowledge of enterprise Identity Providers and federation models.
• Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).
• Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
• Strong understanding of Zero Trust Architecture principles.
• Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
• Ability to produce clear, structured architecture documentation and security blueprints.

Nice to have:

• Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
• AWS Certified Solutions Architect – Professional or AWS Security Specialty.
• Experience with hybrid or multi-cloud governance models.
• Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github actions).
• Knowledge of container and Kubernetes security.
• Exposure to observability and security monitoring frameworks.

Education:

• Bachelor's degree 
• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.

Soft Skills:

• Strong communication and presentation abilities.
• Ability to influence across global and regional teams without direct authority.
• Strong stakeholder management skills.
• Strategic thinking with strong risk awareness.
• Leadership and mentoring capabilities.
• High adaptability in complex, regulated environments.

Additional Information

What do we offer you?

• Long term Employment contract
• Training and career development 
• Possibility to be part of a multicultural team and work on international projects 

If you are passionate about data, development & tech, we want to meet you!

Talan Spain’s commitment to non-discrimination based on gender, race, ideology, or any other reason, in accordance with the company’s "Equality Plan" and the current regulations on gender equality between women and men (Royal Decree-Law 6/2019).