Senior Information Security Architect

Senior Information Security Architect

Location: Atlanta, GA (On site 5 days) Type of Hire : Full-Time/W2

Position Overview

Hexaware Technologies is seeking an experienced Senior Information Security Architect to lead the design, implementation, and governance of enterprise security architectures across cloud-native environments, modern application ecosystems, and CI/CD pipelines. The ideal candidate will possess deep expertise in security architecture, threat modeling, DevSecOps, cloud security, and data protection practices, with a strong focus on AWS environments.

This role will be responsible for architecting secure solutions, conducting comprehensive threat modeling exercises, defining security controls within Infrastructure-as-Code (IaC) and CI/CD pipelines, and ensuring compliance with enterprise security policies, industry frameworks, and regulatory requirements.

Key Responsibilities

Design and implement enterprise-wide security architectures for cloud, application, and infrastructure platforms.

Lead security architecture reviews and threat modeling assessments for complex business applications and cloud environments.

Define and enforce security controls within CI/CD pipelines, including Infrastructure-as-Code (IaC) frameworks such as Terraform Sentinel.

Develop security standards aligned with industry best practices and frameworks including NIST, OWASP, STRIDE, CIS Benchmarks, ISO 27001, SOX, and FedRAMP.

Architect and implement secure identity and access management (IAM) solutions, authentication and authorization controls, encryption standards, and key management processes.

Provide guidance on data security strategies including data encryption, masking, tokenization, discovery, and access governance.

Partner with engineering and cloud teams to integrate security into application development lifecycles and DevOps processes.

Evaluate emerging technologies, including AI and Agentic AI solutions, from a security architecture and risk management perspective.

Conduct risk assessments and recommend security mitigations to address identified vulnerabilities and threats.

Ensure cloud environments maintain compliance with organizational policies and regulatory requirements.

Required Qualifications

AWS Cloud Security & Architecture

Deep expertise and proven experience designing, securing, and architecting solutions within AWS environments.

Strong hands-on experience across AWS services including: Compute Services

IAM

RDS

Resource Policies

Networking

Messaging Services

Data Storage Services

CI/CD Services

AI/ML Services

ETL Platforms

Serverless Architectures

ECS/EKS

Strong understanding of AWS Well-Architected Framework and AWS Security Pillars.

Experience implementing cloud-native security controls and governance frameworks.

Security Architecture & DevSecOps

Extensive experience in: Application Security

Security Architecture

Threat Modeling (STRIDE)

API Security

DevSecOps

CI/CD Pipeline Security

Infrastructure Security

Authentication & Authorization (AuthN/AuthZ)

Encryption & Key Management

Data Discovery & Protection

Access Control Frameworks

Container Security

SIEM, CSPM, and CWPP technologies

Security Frameworks & Compliance

Strong working knowledge of: NIST Cybersecurity Framework

OWASP

CIS Benchmarks

FedRAMP

ISO 27001

SOX

Enterprise Risk and Compliance Standards

Infrastructure-as-Code & Security Controls

Experience implementing security guardrails within Terraform and Terraform Sentinel.

Ability to define and enforce policy-as-code controls across cloud infrastructure deployments.

Experience integrating security controls into automated build, test, and deployment pipelines.

AI Security (Preferred)

Experience securing AI/ML platforms and workloads.

Exposure to Generative AI and Agentic AI security architecture, governance, and risk management practices.

Preferred Qualifications

Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.

Industry certifications such as: CISSP

CCSP

AWS Certified Security Specialty

AWS Solutions Architect Professional

TOGAF

SABSA