Senior Information Security Architect

Senior Information Security Architect

Location: Atlanta, GA (On site 5 days)

Type of Hire: Full-Time/W2

Position Overview

Hexaware Technologies is seeking an experienced Senior Information Security Architect to lead the design, implementation, and governance of enterprise security architectures across cloud-native environments, modern application ecosystems, and CI/CD pipelines. The ideal candidate will possess deep expertise in security architecture, threat modeling, DevSecOps, cloud security, and data protection practices, with a strong focus on AWS environments.

This role will be responsible for architecting secure solutions, conducting comprehensive threat modeling exercises, defining security controls within Infrastructure-as-Code (IaC) and CI/CD pipelines, and ensuring compliance with enterprise security policies, industry frameworks, and regulatory requirements.

Key Responsibilities

• Design and implement enterprise-wide security architectures for cloud, application, and infrastructure platforms.
• Lead security architecture reviews and threat modeling assessments for complex business applications and cloud environments.
• Define and enforce security controls within CI/CD pipelines, including Infrastructure-as-Code (IaC) frameworks such as Terraform Sentinel.
• Develop security standards aligned with industry best practices and frameworks including NIST, OWASP, STRIDE, CIS Benchmarks, ISO 27001, SOX, and FedRAMP.
• Architect and implement secure identity and access management (IAM) solutions, authentication and authorization controls, encryption standards, and key management processes.
• Provide guidance on data security strategies including data encryption, masking, tokenization, discovery, and access governance.
• Partner with engineering and cloud teams to integrate security into application development lifecycles and DevOps processes.
• Evaluate emerging technologies, including AI and Agentic AI solutions, from a security architecture and risk management perspective.
• Conduct risk assessments and recommend security mitigations to address identified vulnerabilities and threats.
• Ensure cloud environments maintain compliance with organizational policies and regulatory requirements.

Required Qualifications

AWS Cloud Security & Architecture

• Deep expertise and proven experience designing, securing, and architecting solutions within AWS environments.
• Strong hands-on experience across AWS services including:
  • Compute Services
  • IAM
  • RDS
  • Resource Policies
  • Networking
  • Messaging Services
  • Data Storage Services
  • CI/CD Services
  • AI/ML Services
  • ETL Platforms
  • Serverless Architectures
  • ECS/EKS
• Strong understanding of AWS Well-Architected Framework and AWS Security Pillars.
• Experience implementing cloud-native security controls and governance frameworks.

Security Architecture & DevSecOps

• Extensive experience in:
  • Application Security
  • Security Architecture
  • Threat Modeling (STRIDE)
  • API Security
  • DevSecOps
  • CI/CD Pipeline Security
  • Infrastructure Security
  • Authentication & Authorization (AuthN/AuthZ)
  • Encryption & Key Management
  • Data Discovery & Protection
  • Access Control Frameworks
  • Container Security
  • SIEM, CSPM, and CWPP technologies

Security Frameworks & Compliance

• Strong working knowledge of:
  • NIST Cybersecurity Framework
  • OWASP
  • CIS Benchmarks
  • FedRAMP
  • ISO 27001
  • SOX
  • Enterprise Risk and Compliance Standards

Infrastructure-as-Code & Security Controls

• Experience implementing security guardrails within Terraform and Terraform Sentinel.
• Ability to define and enforce policy-as-code controls across cloud infrastructure deployments.
• Experience integrating security controls into automated build, test, and deployment pipelines.

AI Security (Preferred)

• Experience securing AI/ML platforms and workloads.
• Exposure to Generative AI and Agentic AI security architecture, governance, and risk management practices.

Preferred Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
• Industry certifications such as:
  • CISSP
  • CCSP
  • AWS Certified Security Specialty
  • AWS Solutions Architect Professional
  • TOGAF
  • SABSA