The English-language job board for Spain

Security Architect

Hybrid in Barcelona·Added yesterday (last checked 23 Oct)

Agency

Q-TECH

92 open roles

Apply

Our summary

Work mode: Hybrid, Barcelona
Experience: 5+ years
Education: University degree

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

University degree in Computer Engineering, Telecommunications, Information Systems, Cybersecurity, or an equivalent technical discipline. Postgraduate training or a Master's degree in cybersecurity, enterprise architecture, cloud, distributed systems, or technological governance will be valued.

Minimum recommended experience of 5 to 8 years in security architecture, solution architecture, security engineering, or critical platform design functions, preferably in financial entities, large corporations, or regulated environments. Demonstrated ability to define technical criteria, review architectures, influence multidisciplinary teams, and convert security and risk requirements into implementable design decisions is required.

Nice to have

· Enterprise security architecture and reference models: Zero Trust, defense in depth, security by design, technological risk management, and architecture governance.

· Identity and access: IAM, CIAM, federation, SAML, OAuth2, OpenID Connect, MFA, privilege management, authorization, and delegated models.

· Cloud security and modern platforms: security controls in cloud environments, containers, Kubernetes, DevSecOps, automation, and workload protection.

· API, microservices, and integration security: gateways, authentication, authorization, abuse protection, traceability, and secure service design.

· Data protection: encryption, tokenization, secrets management, classification, privacy, traceability, and controls over sensitive data.

The role

At Q-tech, we are collaborating with BancSabadell for a Security Architect position with the following requirements:

Define, govern, and evolve the security architecture of the bank's technological solutions, ensuring that the designs of systems, platforms, applications, identities, data, integrations, and cloud services incorporate security, compliance, resilience, and Zero Trust principles from their conception. Act as a technical reference within Systems Architecture to establish reusable security criteria, patterns, and controls, aligned with corporate strategy, technological risks, and business needs.

What you'll do

FUNCTIONS (Max. 10)

1. Define security architectures for new solutions, platforms, and technological evolutions, ensuring their alignment with corporate principles, security standards, and the enterprise architecture model.

2. Design and govern reusable security patterns in areas such as identity and access, API security, data protection, cloud security, application security, third-party integration, agentic platforms, and automation.

3. Evaluate technical designs and solution architectures, identifying risks, dependencies, deviations, and necessary controls before implementation.

4. Support project, development, infrastructure, cloud, and cybersecurity teams in making architectural decisions related to security.

5. Define non-functional security requirements, acceptance criteria, and architectural controls for internal, external, SaaS, cloud solutions, and corporate integrations.

6. Participate in committees, design reviews, and technological governance processes, defending security architecture decisions with technical judgment, proportionality, and a risk-oriented approach.

7. Drive the adoption of Zero Trust principles, least privilege, defense in depth, segregation of duties, traceability, auditability, and secure automation.

8. Collaborate in the definition of security technological roadmaps, solution selection, capability analysis, and the establishment of reference models.

9. Maintain and evolve architectural documentation, standards, guides, patterns, and security-related design decisions.

10. Act as a technical point of reference to translate risks, regulations, and cybersecurity requirements into applicable and sustainable architectural decisions.

INTERNAL EXPERIENCE

Previous experience in areas of technological architecture, security architecture, cybersecurity, infrastructure, cloud, identity, secure development, or solution governance in complex corporate environments. Knowledge of the internal technological ecosystem, architecture processes, governance models, integration with systems, development, technological risk, compliance, and cybersecurity teams will be valued.

About Q-TECH

Q-TECH is a technology recruitment company founded in 2000, with a team of 20 people and annual revenue of approximately 2 million euros. The company specializes in connecting IT professionals with companies, focusing on tech talent acquisition across various departments including backend, frontend, data, infrastructure, and more.

Q-TECH operates with a hybrid work model in Barcelona, Spain, and emphasizes a close, authentic approach to recruitment. The company is active in the IT community and offers roles in areas such as cloud administration, software development, and project management, making it a potential opportunity for international tech professionals seeking to work in Spain.