Senior Information Security Architect

HEXAWARE•United States,

3d•Onsite

About The Position

Hexaware Technologies is seeking an experienced Senior Information Security Architect to lead the design, implementation, and governance of enterprise security architectures across cloud-native environments, modern application ecosystems, and CI/CD pipelines, with a strong focus on AWS. The role involves architecting secure solutions, conducting threat modeling, defining security controls within Infrastructure-as-Code (IaC) and CI/CD pipelines, and ensuring compliance with enterprise security policies, industry frameworks, and regulatory requirements. The position is based on site in Atlanta, Georgia, five days per week, and is full-time/W2.

Requirements

Deep expertise and proven experience designing, securing, and architecting solutions within AWS environments.
Strong hands-on experience with AWS compute services, IAM, RDS, resource policies, networking, messaging services, data storage services, CI/CD services, AI/ML services, ETL platforms, serverless architectures, and ECS/EKS.
Strong understanding of the AWS Well-Architected Framework and AWS Security Pillars.
Experience implementing cloud-native security controls and governance frameworks.
Extensive experience in application security, security architecture, STRIDE threat modeling, API security, DevSecOps, CI/CD pipeline security, infrastructure security, AuthN/AuthZ, encryption and key management, data discovery and protection, access control frameworks, container security, and SIEM, CSPM, and CWPP technologies.
Strong working knowledge of the NIST Cybersecurity Framework, OWASP, CIS Benchmarks, FedRAMP, ISO 27001, SOX, and enterprise risk and compliance standards.
Experience implementing security guardrails within Terraform and Terraform Sentinel.
Ability to define and enforce policy-as-code controls across cloud infrastructure deployments.
Experience integrating security controls into automated build, test, and deployment pipelines.

Nice To Haves

Experience securing AI/ML platforms and workloads.
Exposure to Generative AI and Agentic AI security architecture, governance, and risk management practices.
Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
Industry certifications such as CISSP, CCSP, AWS Certified Security Specialty, AWS Solutions Architect Professional, TOGAF, or SABSA.

Responsibilities

Design and implement enterprise-wide security architectures for cloud, application, and infrastructure platforms.
Lead security architecture reviews and threat modeling assessments for complex business applications and cloud environments.
Define and enforce security controls within CI/CD pipelines, including IaC frameworks such as Terraform Sentinel.
Develop security standards aligned with NIST, OWASP, STRIDE, CIS Benchmarks, ISO 27001, SOX, and FedRAMP.
Architect and implement secure IAM solutions, authentication and authorization controls, encryption standards, and key management processes.
Provide guidance on data security strategies, including encryption, masking, tokenization, discovery, and access governance.
Partner with engineering and cloud teams to integrate security into application development lifecycles and DevOps processes.
Evaluate emerging technologies, including AI and Agentic AI solutions, from a security architecture and risk management perspective.
Conduct risk assessments and recommend mitigations for identified vulnerabilities and threats.
Ensure cloud environments comply with organizational policies and regulatory requirements.