Security Solution Architect

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with:

• Client's approved security frameworks • Enterprise governance and regulatory requirements • Multi-region/domain architectural consistency • Cloud-native best practices (primarily AWS)

You will act as a trusted security architecture advisor, working closely with:

• CIB CTO Security • BaaS Security • CISO • Regional architecture and security teams and platform engineering domains • Devops team • Solution Architect team

KEY RESPONSIBILITIES

• Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards. • Ensure multi-region/domain alignment of security patterns and architectural consistency. • Design authentication and authorization models based on: • OAuth2 • OpenID Connect (OIDC) • SAML 2.0 • Federated identity • JWT/token-based architectures • Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios. • Collaborate with Security and Governance stakeholders to validate architectural decisions. • Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies. • Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps. • Embed security-by-design and DevSecOps principles across solution lifecycles. • Participate in architecture reviews, threat modeling, and risk assessments. • Establish reusable security patterns, blueprints, and best practices for cross-region adoption. • Stay current with AWS security services and evolving industry standards.

Mandatory Skills

• 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM. • Proven experience designing security architectures in cloud-native environments (AWS preferred). • Experience aligning architectures with enterprise-wide security frameworks. • Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations. • Experience contributing to cloud migration and modernization programs. • Experience in regulated environments (financial services preferred). • Advanced English profiency (Spanish is a plus).

Skills & Knowledge

• Deep understanding of authentication and authorization frameworks. • Strong knowledge of enterprise Identity Providers and federation models. • Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.). • Experience defining IAM strategies for multi-region/domain and hybrid cloud environments. • Strong understanding of Zero Trust Architecture principles. • Knowledge of encryption standards, PKI, certificate lifecycle management, TLS/mTLS. • Ability to produce clear, structured architecture documentation and security blueprints.