1 day ago
Porto, PortugalSenior
Responsibilities
- Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.
- Ensure multi-region and multi-domain alignment of security patterns and architectural consistency.
- Design authentication and authorization models using OAuth2, OpenID Connect, SAML 2.0, federated identity, and JWT/token-based architectures.
- Define IAM strategies for AWS, hybrid cloud, and multi-cloud environments.
- Collaborate with security, governance, CISO, CTO, regional architecture, platform engineering, DevOps, and solution architecture stakeholders.
- Lead and execute proofs of concept for security models and emerging technologies.
- Contribute to cloud migration and modernization initiatives by defining secure target architectures and transition roadmaps.
- Embed security-by-design and DevSecOps principles across solution lifecycles.
- Participate in architecture reviews, threat modeling, and risk assessments.
- Establish reusable security patterns, blueprints, and best practices for cross-region adoption.
- Stay current with AWS security services and evolving industry standards.
- Produce structured architecture documentation and security blueprints while influencing global and regional teams without direct authority.
Requirements
- At least 5 years of experience in solution architecture with a strong focus on security architecture and IAM.
- Proven experience designing security architectures in cloud-native environments, preferably AWS.
- Experience aligning architectures with enterprise-wide security frameworks.
- Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise identity-provider integrations.
- Experience contributing to cloud migration and modernization programs.
- Experience in regulated environments, preferably financial services.
- Advanced English proficiency; Spanish is a plus.
- Deep understanding of authentication and authorization frameworks, enterprise identity providers, federation models, Zero Trust Architecture, encryption, PKI, certificate lifecycle management, TLS, and mTLS.
- Advanced knowledge of AWS security services, including IAM, KMS, WAF, Shield, Security Hub, API Gateway, and EKS.
- Experience defining IAM strategies for multi-region, multi-domain, hybrid-cloud, and multi-cloud environments.
- Knowledge of container and Kubernetes security, observability, and security monitoring frameworks.
- Strong communication, presentation, stakeholder management, strategic thinking, risk awareness, leadership, mentoring, and adaptability skills.
- Security certifications such as CISSP, CISM, CCSP, SABSA, or equivalent are desirable.
- AWS Certified Solutions Architect – Professional or AWS Security Specialty certification is desirable.
- Experience with hybrid or multi-cloud governance models, DevSecOps practices, and infrastructure-as-code security controls using Terraform, Ansible, or GitHub Actions is desirable.
- Bachelor's degree required; postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture are valued.
Benefits
- Long-term employment contract.
- Training and career development opportunities.
- Opportunity to join a multicultural team and work on international projects.
- Talan states its commitment to non-discrimination based on gender, race, ideology, and other protected grounds.
Tech Stack
Categories
Solutions Engineering
About Talan
Talan is a Paris‑headquartered, privately held consulting and technology group that delivers data, AI, and IT services to large enterprises. It combines management consulting with systems integration, software engineering, and production support across sectors such as banking and financial services, energy, transport, retail, and healthcare. The firm operates internationally and supports clients’ end‑to‑end change programs, from CRM and agile transformations to architecture, application development, and run.