Security Solution Architect

Location: Porto, Porto District, Portugal

Company

hirify.global is an international consulting group specializing in innovation and business transformation through technology, with more than 7,200 consultants across 21 countries.

What you will do

• Design and govern end-to-end security architectures aligned with Santander Group frameworks, enterprise governance, and regulatory requirements.
• Define authentication, authorization, and IAM models using OAuth2, OIDC, SAML 2.0, federation, and JWT-based architectures.
• Establish secure AWS-native architectures compatible with hybrid and multi-cloud environments.
• Lead PoCs, architecture reviews, threat modeling, and risk assessments.
• Contribute to cloud migration and modernization initiatives, including secure target architectures and transition roadmaps.
• Create reusable security patterns, blueprints, and DevSecOps practices for multi-region adoption.

Requirements

• 5+ years of experience in Solution Architecture with a strong focus on Security Architecture and IAM.
• Experience designing security architectures in cloud-native environments, preferably AWS, and aligning them with enterprise-wide security frameworks.
• Hands-on experience with OAuth2, OIDC, SAML, federation, and enterprise identity provider integrations.
• Experience contributing to cloud migration and modernization programs.
• Experience in regulated environments; financial services experience is preferred.
• Deep knowledge of authentication and authorization, identity providers, federation models, Zero Trust, encryption, PKI, certificate lifecycle management, TLS, and mTLS.
• Advanced knowledge of AWS security services including IAM, KMS, WAF, Shield, Security Hub, API Gateway, and EKS.
• Ability to define IAM strategies for multi-region, multi-domain, and hybrid-cloud environments and produce structured architecture documentation and security blueprints.
• Bachelor’s degree; advanced English proficiency.
• Strong communication, presentation, stakeholder management, strategic thinking, adaptability, and leadership skills.

Nice to have

• Security certifications such as CISSP, CISM, CCSP, or SABSA.
• AWS Certified Solutions Architect – Professional or AWS Security Specialty certification.
• Experience with hybrid or multi-cloud governance, DevSecOps, infrastructure-as-code security controls, Terraform, Ansible, GitHub Actions, Kubernetes security, observability, or security monitoring.
• Postgraduate studies or specialization in Cybersecurity, Cloud Security, or Enterprise Architecture.
• Spanish language skills.

Culture & Benefits

• Long-term employment contract.
• Training and career development opportunities.
• Multicultural team and international projects.