The posting
Job Description
Senior Information Security Architect
Location: Atlanta, GA (On site 5 days) Type of Hire: Full-Time/W2
Position Overview
Hexaware Technologies is seeking an experienced Senior Information Security Architect to lead the design, implementation, and governance of enterprise security architectures across cloud-native environments, modern application ecosystems, and CI/CD pipelines. The ideal candidate will possess deep expertise in security architecture, threat modeling, DevSecOps, cloud security, and data protection practices, with a strong focus on AWS environments.
This role will be responsible for architecting secure solutions, conducting comprehensive threat modeling exercises, defining security controls within Infrastructure-as-Code (IaC) and CI/CD pipelines, and ensuring compliance with enterprise security policies, industry frameworks, and regulatory requirements.
Key Responsibilities
- Design and implement enterprise-wide security architectures for cloud, application, and infrastructure platforms.
- Lead security architecture reviews and threat modeling assessments for complex business applications and cloud environments.
- Define and enforce security controls within CI/CD pipelines, including Infrastructure-as-Code (IaC) frameworks such as Terraform Sentinel.
- Develop security standards aligned with industry best practices and frameworks including NIST, OWASP, STRIDE, CIS Benchmarks, ISO 27001, SOX, and FedRAMP.
- Architect and implement secure identity and access management (IAM) solutions, authentication and authorization controls, encryption standards, and key management processes.
- Provide guidance on data security strategies including data encryption, masking, tokenization, discovery, and access governance.
- Partner with engineering and cloud teams to integrate security into application development lifecycles and DevOps processes.
- Evaluate emerging technologies, including AI and Agentic AI solutions, from a security architecture and risk management perspective.
- Conduct risk assessments and recommend security mitigations to address identified vulnerabilities and threats.
- Ensure cloud environments maintain compliance with organizational policies and regulatory requirements.
Required Qualifications
AWS Cloud Security & Architecture
- Deep expertise and proven experience designing, securing, and architecting solutions within AWS environments.
- Strong hands-on experience across AWS services including:Compute Services IAM RDS Resource Policies Networking Messaging Services Data Storage Services CI/CD Services AI/ML Services ETL Platforms Serverless Architectures ECS/EKS
- Strong understanding of AWS Well-Architected Framework and AWS Security Pillars.
- Experience implementing cloud-native security controls and governance frameworks.
Security Architecture & DevSecOps
- Extensive experience in:Application Security Security Architecture Threat Modeling (STRIDE) API Security DevSecOps CI/CD Pipeline Security Infrastructure Security Authentication & Authorization (AuthN/AuthZ) Encryption & Key Management Data Discovery & Protection Access Control Frameworks Container Security SIEM, CSPM, and CWPP technologies
Security Frameworks & Compliance
- Strong working knowledge of:NIST Cybersecurity Framework OWASP CIS Benchmarks FedRAMP ISO 27001 SOX Enterprise Risk and Compliance Standards
Infrastructure-as-Code & Security Controls
- Experience implementing security guardrails within Terraform and Terraform Sentinel.
- Ability to define and enforce policy-as-code controls across cloud infrastructure deployments.
- Experience integrating security controls into automated build, test, and deployment pipelines.
AI Security (Preferred)
- Experience securing AI/ML platforms and workloads.
- Exposure to Generative AI and Agentic AI security architecture, governance, and risk management practices.
Preferred Qualifications
- Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a related discipline.
- Industry certifications such as:CISSP CCSP AWS Certified Security Specialty AWS Solutions Architect Professional TOGAF SABSA



