Talan

Security Solution Architect

In short

Senior Solution Architect role focused on security and IAM, designing enterprise-grade security architectures aligned with a major financial client's (Santander Group) frameworks, primarily on AWS cloud-native environments. Posted by Talan, an international IT consulting group, for a hybrid position in Porto. Requires 5+ years in Solution Architecture with deep expertise in IAM, OAuth2/OIDC/SAML, Zero Trust, AWS security services, and experience in regulated financial environments; relevant security certifications (CISSP, CISM, CCSP, SABSA, AWS Security Specialty) are valued.

Talan – Positive Innovation
Talan is an international consulting group specializing in innovation and business transformation through technology. With over 7,200 consultants in 21 countries and a turnover of €850M, we are committed to delivering impactful, future-ready solutions.
Talan at a Glance
Headquartered in Paris and operating globally, Talan combines technology, innovation, and empowerment to deliver measurable results for our clients. Over the past 22 years, we've built a strong presence in the IT and consulting landscape, and we're on track to reach €1 billion in revenue this year.
Our Core Areas of Expertise
•Data & Technologies: We design and implement large-scale, end-to-end architecture and data solutions, including data integration, data science, visualization, Big Data, AI, and Generative AI.
•Cloud & Application Services: We integrate leading platforms such as SAP, Salesforce, Oracle, Microsoft, AWS, and IBM Maximo, helping clients transition to the cloud and improve operational efficiency.
•Management & Innovation Consulting: We lead business and digital transformation initiatives through project and change management best practices (PM, PMO, Agile, Scrum, Product Ownership), and support domains such as Supply Chain, Cybersecurity, and ESG/Low-Carbon strategies.
We work with major global clients across diverse sectors, including Transport & Logistics, Financial Services, Energy & Utilities, Retail, and Media & Telecommunications.
Responsibilities
As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:
•Client's approved security frameworks
•Enterprise governance and regulatory requirements
•Multi-region/domain architectural consistency
•Cloud-native best practices (primarily AWS)
•CIB CTO Security
•BaaS Security
•CISO
•Regional architecture and security teams and platform engineering domains
•Devops team
•Solution Architect team
Tasks:
•Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
•Ensure multi-region/domain alignment of security patterns and architectural consistency.
•Design authentication and authorization models based on: OAuth2, OpenID Connect (OIDC), SAML 2.0, Federated identity, JWT/token-based architectures.
•Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios.
•Collaborate with Security and Governance stakeholders to validate architectural decisions.
•Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies.
•Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps.
•Embed security-by-design and DevSecOps principles across solution lifecycles.
•Participate in architecture reviews, threat modeling, and risk assessments.
•Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
•Stay current with AWS security services and evolving industry standards.
Requirements
•5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM.
•Proven experience designing security architectures in cloud-native environments (AWS preferred).
•Experience aligning architectures with enterprise-wide security frameworks.
•Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.
•Experience contributing to cloud migration and modernization programs.
•Experience in regulated environments (financial services preferred).
•Advanced English proficiency (Spanish is a plus).
•Deep understanding of authentication and authorization frameworks.
•Strong knowledge of enterprise Identity Providers and federation models.
•Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).
•Experience defining IAM strategies for multi-region/domain and hybrid cloud environments.
•Strong understanding of Zero Trust Architecture principles.
•Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS.
•Ability to produce clear, structured architecture documentation and security blueprints.
•Security certifications (CISSP, CISM, CCSP, SABSA or equivalent).
•AWS Certified Solutions Architect – Professional or AWS Security Specialty.
•Experience with hybrid or multi-cloud governance models.
•Experience with DevSecOps practices and infrastructure-as-code security controls (Terraform, Ansible, Github Actions).
•Knowledge of container and Kubernetes security.
•Exposure to observability and security monitoring frameworks.
•Education: Bachelor's degree. Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.
•Strong communication and presentation abilities.
•Ability to influence across global and regional teams without direct authority.
•Strong stakeholder management skills.
•Strategic thinking with strong risk awareness.
•Leadership and mentoring capabilities.
•High adaptability in complex, regulated environments.
Conditions
•Long term Employment contract
•Training and career development
•Possibility to be part of a multicultural team and work on international projects

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot