Senior Information Security Architect

Senior Information Security Architect Location: Atlanta, GA (On site 5 days) Type of Hire: Full-Time/W2

Position Overview Hexaware Technologies is seeking an experienced Senior Information Security Architect to lead the design, implementation, and governance of enterprise security architectures across cloud-native environments, modern application ecosystems, and CI/CD pipelines. The ideal candidate will possess deep expertise in security architecture, threat modeling, DevSecOps, cloud security, and data protection practices, with a strong focus on AWS environments. This role will be responsible for architecting secure solutions, conducting comprehensive threat modeling exercises, defining security controls within Infrastructure-as-Code (IaC) and CI/CD pipelines, and ensuring compliance with enterprise security policies, industry frameworks, and regulatory requirements.

Key Responsibilities

• Design and implement enterprise-wide security architectures for cloud, application, and infrastructure platforms.
• Lead security architecture reviews and threat modeling assessments for complex business applications and cloud environments.
• Define and enforce security controls within CI/CD pipelines, including Infrastructure-as-Code (IaC) frameworks such as Terraform Sentinel.
• Develop security standards aligned with industry best practices and frameworks including NIST, OWASP, STRIDE, CIS Benchmarks, ISO 27001, SOX, and FedRAMP.
• Architect and implement secure identity and access management (IAM) solutions, authentication and authorization controls, encryption standards, and key management processes.
• Provide guidance on data security strategies including data encryption, masking, tokenization, discovery, and access governance.
• Partner with engineering and cloud teams to integrate security into application development lifecycles and DevOps processes.
• Evaluate emerging technologies, including AI and Agentic AI solutions, from a security architecture and risk management perspective.
• Conduct risk assessments and recommend security mitigations to address identified vulnerabilities and threats.
• Ensure cloud environments maintain compliance with organizational policies and regulatory requirements.

Required Qualifications AWS Cloud Security & Architecture

• Deep expertise and proven experience designing, securing, and architecting solutions within AWS environments.
• Strong hands-on experience across AWS services including:
• Compute Services
• IAM
• RDS
• Resource Policies
• Networking
• Messaging Services
• Data Storage Services
• CI/CD Services
• AI/ML Services
• ETL Platforms
• Serverless Architectures
• ECS/EKS
• Strong understanding of AWS Well-Architected Framework and AWS Security Pillars.
• Experience implementing cloud-native security controls and governance frameworks.

Security Architecture & DevSecOps

• Extensive experience in:
• Application Security
• Security Architecture
• Threat Modeling (STRIDE)
• API Security
• DevSecOps
• CI/CD Pipeline Security
• Infrastructure Security
• Authentication & Authorization (AuthN/AuthZ)
• Encryption & Key Management
• Data Discovery & Protection
• Access Control Frameworks
• Container Security
• SIEM, CSPM, and CWPP technologies

Security Frameworks & Compliance

• Strong working knowledge of:
• NIST Cybersecurity Framework
• OWASP
• CIS Benchmarks
• FedRAMP
• ISO 27001
• SOX
• Enterprise Risk and Compliance Standards

Infrastructure-as-Code & Security Controls

• Experience implementing security guardrails within Terraform and Terraform Sentinel.
• Ability to define and enforce policy-as-code controls across cloud infrastructure deployments.
• Experience integrating security controls into automated build, test, and deployment pipelines.

AI Security (Preferred)

• Experience securing AI/ML platforms and workloads.
• Exposure to Generative AI and Agentic AI security architecture, governance, and risk management practices.

Preferred Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
• Industry certifications such as:
• CISSP
• CCSP
• AWS Certified Security Specialty
• AWS Solutions Architect Professional
• TOGAF
• SABSA