Information Security Architect

Idexcel; Reston (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

Idexcel is seeking a Senior Information Security Architect to focus on Threat Modeling for Agentic AI applications. The role will architect security across IaaS, SaaS and in-house apps, leading threat modeling activities and translating threats into concrete controls.

The candidate will collaborate with product owners and enterprise architects, leveraging AWS, IAM, data security, and DevSecOps practices to ensure compliant cloud architectures aligned with NIST, OWASP and other standards.

Qualifications

• Must have experience Threat Modeling using industry frameworks and evaluating security controls for AI applications.
• Deep expertise in STRIDE, attack trees, abuse/misuse cases, data-flow and trust-boundary analysis.
• Experience threat modeling complex applications, APIs, cloud, SaaS, and distributed architectures.

Responsibilities

• Lead the security architecture and Threat Modeling across multiple projects including IaaS, SaaS and in-house apps.
• Collaborate with product owners and Enterprise Architect teams to translate threats into architectural security controls.

Skills

Threat Modeling

STRIDE Analysis

Data Security

IAM/AuthN/AuthZ

AWS Architecture

DevSecOps

Container Security

Cloud Security

AI Security

Job description

Hiring for a Senior Information Security Architect position primarily focusing on Threat Modeling Agentic AI Applications. This position requires deep expertise in Information Security principles including Business Security Architecture, Threat Modelling, Data Security (data encryption, masking, tokenization, data access controls), AI, Agentic AI, Identity and access management, AWS Cloud and Systems architecture. This individual must be able to architect and Threat Model complex applications to ensure the security and compliance of the cloud environments based on enterprise cloud security policies, standards, procedures and industry best practices and frameworks (NIST, OWASP, STRIDE)

Self-starter and Senior Architect who can lead the Security architecture and Threat Modeling in multiple projects encompassing IaaS, SaaS and in house built applications simultaneously by collaborating with numerous stakeholders (Product owners, Enterprise Architect)

Must Have

1. Threat Modeling

• Experience Threat Modeling using industry frameworks and experience evaluating security controls for AI aplications and Platforms
• Deep expertise in STRIDE, attack trees, abuse/misuse cases, data-flow and trust-boundary analysis.
• Experience threat modeling complex applications, APIs, cloud, SaaS, and distributed architectures.
• Strong expertise in Application/API Security, IAM/AuthN/AuthZ, Data Security, Encryption/Key Management, DevSecOps, Container Security, and Cloud Security.
• Experience translating identified threats into architectural security controls.

2 Public Cloud: AWS Experience

Deep Expertise and proven Track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS). Experience with AWS security pillars, best practices and well designed architecture. Experience in AI/ML is preferable.

3 Information Security Architecture

Key experience: Application security, Threat Modelling, API Security, DevSecOps, Pipeline security, Infrastructure security, AuthN/Z, Encryption, Key Management, Data discovery and encryption, SIEM, CSPM, CWPP, Access Controls, Container Security

Industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX etc.).

Experience designing Architectures based on Security Standards and threat model the designs to identify issues and design mitigating controls.

Key experience: System Design, API Driven architecture, Open Standards, stateless, Resiliency, High Availability, System and SaaS Integrations.

Nice to Have

1. AWS advanced Certification (Professional, Specialty), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP) or equivalent