Security Solution Architect

About this role

As a Senior Solution Architect – Security Focus, you will design and govern secure enterprise-grade architectures aligned with: Client's approved security frameworks Enterprise governance and regulatory requirements Multi-region/domain architectural consistency Cloud-native best practices (primarily AWS) You will act as a trusted security architecture advisor, working closely with: CIB CTO Security BaaS Security CISO Regional architecture and security teams and platform engineering domains Devops team Solution Architect team KEY RESPONSIBILITIES Define and design end-to-end security architectures aligned with Santander Group security frameworks and standards.

Ensure multi-region/domain alignment of security patterns and architectural consistency. Design authentication and authorization models based on: OAuth2 OpenID Connect (OIDC) SAML 2.0 Federated identity JWT/token-based architectures Define IAM strategies for cloud-native environments, primarily AWS, while ensuring compatibility with hybrid or multi-cloud scenarios. Collaborate with Security and Governance stakeholders to validate architectural decisions.

Lead and execute Proofs of Concept (PoCs) to validate security models and emerging technologies. Contribute to cloud migration and modernization initiatives, defining secure target architectures and transition roadmaps. Embed security-by-design and DevSecOps principles across solution lifecycles. Participate in architecture reviews, threat modeling, and risk assessments. Establish reusable security patterns, blueprints, and best practices for cross-region adoption.

Stay current with AWS security services and evolving industry standards. Mandatory Skills 5+ years of experience in Solution Architecture with strong focus on Security Architecture and IAM. Proven experience designing security architectures in cloud-native environments (AWS preferred). Experience aligning architectures with enterprise-wide security frameworks. Hands-on experience implementing OAuth2, OIDC, SAML, federation, and enterprise IdP integrations.

Experience contributing to cloud migration and modernization programs. Experience in regulated environments (financial services preferred). Advanced English profiency (Spanish is a plus). Skills & Knowledge Deep understanding of authentication and authorization frameworks. Strong knowledge of enterprise Identity Providers and federation models. Advanced knowledge of AWS security services (IAM, KMS, WAF, Shield, Security Hub, API Gateway, EKS, etc.).