Senior Information Security Architect

HMG AMERICA LLC; Reston (VA); On-site; USD 170,000 - 210,000; Full time

Job summary

HMG AMERICA LLC seeks a Senior Information Security Architect to lead AWS security architecture across multiple cloud projects from Reston, VA. You will drive threat modelling, data security, and control design per enterprise policies and standards.

Candidates should demonstrate extensive AWS expertise, security engineering experience, and ability to collaborate with product owners and enterprise architects to secure cloud initiatives.

Qualifications

• Public Cloud: AWS expert with architecture and service experience.
• Information Security Architecture including threat modelling and data protection.
• Experience designing architectures aligned to security standards and controls.

Skills

AWS expertise

Threat modelling

Data security

DevSecOps

API security

Encryption & key mgmt

SIEM

CSPM

CWPP

System architecture

Education

AWS Certification

CISSP

CCSP

Tools

AWS services

CI/CD pipelines

IAM management

ECS/EKS

Security frameworks

Job description

Role: Senior Information Security Architect

Location;- Reston, VA

Job Description

Hiring for a Senior Information Security Architect position primarily focusing on AWS. This position requires deep expertise in Information Security principles including Business Security Architecture, Threat Modelling, Data Security (data encryption, masking, tokenization, data access controls), AWS Cloud and Systems architecture. This individual must be able to architect and ensure the security and compliance of the cloud environments based on enterprise cloud security policies, standards, procedures and industry best practices and frameworks (NIST, OWASP). Self-starter and Senior Architect who can lead the AWS Security architecture program in multiple projects simultaneously by collaborating with numerous stakeholders (Product owners, Enterprise Architect).

Must Have

• 1 Public Cloud: AWS Experience Deep Expertise and proven Track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS). Experience with AWS security pillars, best practices and well-designed architecture. Experience in AI/ML is preferable.
• 2 Information Security Architecture Key experience: Application security, Threat Modelling, API Security, DevSecOps, Pipeline security, Infrastructure security, AuthN/Z, Encryption, Key Management, Data discovery and encryption, SIEM, CSPM, CWPP, Access Controls, Container Security Industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX etc.). Experience designing Architectures based on Security Standards and threat model the designs to identify issues and design mitigating controls.
• Systems Architecture Key experience: System Design, API Driven architecture, Open Standards, stateless, Resiliency, High Availability, System and SaaS Integrations.

Nice to Have

• AWS advanced Certification (Professional, Specialty), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP) or equivalent