Aquitecto Seguridad IT (IT Security Architecture) 1

IT Security Architecture

¿Your mission? 🎯

At GCTIO, we lead network technology across the Telefónica group. Our mission is to ensure that the right technologies are identified, selected, and deployed in the most efficient and effective way to support Telefónica’s strategic vision and business objectives. This includes the security of our networks and Systems defining the right architecture and technologies to assure having a secure infrastructure.

In this role based in Madrid (Spain), you will work for defining the security IT architecture across the Telefónica Group within the GCTIO organization. Your primary responsibility will be to drive the IT architecture security requirements in close coordination with Telefónica’s operating businesses and key stakeholders. It will also include participation in security standardization fora.

The role requires strategic vision and deep technical expertise to steer the security solutions in our networks.

You will play a key role in shaping the future IT security and ensuring a consistent security strategy across the Group, fostering innovation and operational efficiency.

 ¿ How will you contribute to this role?

? 💼

• Extensive knowledge of communications and security architectures for LAN, WAN, WLAN and SD-WAN networks, including routing, switching, segmentation, VLANs, security zones and access control
• Design and evolution of security architectures for data centres, offices, cloud environments, hybrid platforms and corporate services.
• Experience with network and security technologies such as firewalls, NGFWs, load balancers, routers, switches, IDS/IPS, VPNs, proxies, WAFs, NAC, SIEM and monitoring and response platforms.
• Definition of architectures based on Zero Trust, defence in depth, least privilege, segmentation and security by design principles.
• Design of solutions to protect web applications, APIs and corporate services, including authentication, authorisation, encryption, session management, protection against attacks and communications security.
• Knowledge and application of security standards and best practices such as ISO 27001, the NIST Cybersecurity Framework, CIS Controls, OWASP and MITRE ATT&CK.
• Use and management of digital certificates, PKI, certification authorities, HSMs, key management, electronic signatures and cryptographic protocols.
• Administration and securing of Linux and Windows systems, including hardening, identity and privilege management, updates, monitoring, event logging and vulnerability management.
• Extensive knowledge of network, server and service virtualisation technologies, as well as architectures based on virtual machines, containers and cloud platforms.
• Evaluation, selection and integration of security tools for threat prevention, detection, investigation and response.
• Conducting risk assessments, threat modelling and architecture reviews to identify vulnerabilities, exposure surfaces, critical dependencies and potential attack vectors.
• Definition of security patterns, standards and requirements for infrastructure projects, applications, cloud services and technology procurement processes.
• Technical evaluation of vendors and suppliers, delivery of proofs of concept and validation of the integration, scalability, performance and effectiveness of security solutions.
• Collaboration with infrastructure, network, cloud, development, operations, SOC, business continuity and data protection teams to integrate security throughout the service lifecycle.
• Knowledge of the fundamentals of quantum computing and its impact on the public-key cryptographic algorithms currently in use.
• Practical evaluation of PQC in scenarios such as TLS, VPNs, PKI, digital signatures, secure email, identity management and data protection.
• Support for operating companies in defining roadmaps and implementing post-quantum migration, prioritising critical assets, exposed services, long-lived data and vendor dependencies.
• Participate in standardization fora

¿What skills and key capabilities we are looking for? 🔎

• 1 year + of experience in a similar role
• Strong experience and knowledge in network security
• Experience in AI and Agentic AI
• Experience in participating and contributing in IT standards and industry ecosystem
• Knowledge and experience in cloud native infrastructures
• Fluent in Spanish and English

¿Whichi other aspecto will be considered? 📚

• Master in computer science or telecom engineering.
• Automation driven in improving day to day way of working

• Ability to work in a multinational and multicultural environment.
• Team working and customer focus
• Strong verbal, visual, and written communication skills
• Capability to communicate at different levels (directors, engineers, …) to disseminate architecture and technology propositions.
• Dynamic attitude, self-learner and proactivity.

If you join Telefónica

You join almost 100 years of history, you join a team of 106 nationalities present in more tan 35 countries. You join a team that works to connect people wherever they are. We are leading the digital revolution with the enthusiasm of the first day in all our businesses, creating the best digital ecosystem for our clients: network, IoT, cloud, security, innovation etc. Here, at Telefónica you count with everything you need to be the best you. We need people like you that wants to take this challenge of creating the Telefónica of tomorrow.

Telefonica is committed to the new working ways. Under our proposition “Disconnect to Reconnect” we have applied the Digital Disconnection.

You join a company whose activity is governed by its code of ethics, Our Responsible Business Principles. We are looking for people who identify with them, who help us make decisions based on integrity, commitment and transparency and who are committed to ethical management, promoting fairer and more sustainable social and environmental development.

#WeAreInclusive

We strongly believe diverse and inclusive teams become more innovative and they achieve improved results. Telefonica aims to promote and guarantee a place for everyone, just the way we are: gender, age range, sexual orientation and/or identity, culture, creed, disability or any other personal condition.