Senior Security Architect

Idexcel; Plano (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Idexcel is seeking a Senior Information Security Architect to lead security architecture across cloud, CI/CD, and threat modeling initiatives. You will design controls, patterns, and reference architectures aligned with NIST, OWASP, and CIS benchmarks.

You will specialize in AWS-based solutions, IAM, encryption, data security, and DevSecOps, translating threats into secure cloud designs and policy-as-code. Plano, TX with possible hybrid options.

Qualifications

• Application security, threat modelling, API security, DevSecOps, pipeline security.
• Security standards: OWASP, NIST, CIS, FED Ramp, ISO, SOX.
• Threat model architectures to identify issues and mitigations.

Responsibilities

• Define security controls for CI/CD pipelines and IaC.
• Design and maintain security architecture patterns and reference architectures.
• Translate threats into architectural security controls.
• Develop policy-as-code controls and automated cloud governance.

Skills

AWS Architecture

Threat Modelling

DevSecOps

IAM/AuthN/AuthZ

CI/CD Security

Container Security

Policy-as-code

Tools

Terraform Sentinel

Job description

Hiring for a Senior Information Security Architect position primarily focusing on Security Architecture , CI/CD Pipeline Security and Threat Modeling.

This position requires deep expertise in Information Security principles including Business Security Architecture, Threat Modelling, Data Security (data encryption, masking, tokenization, data access controls), AI, Agentic AI, Identity and access management, AWS Cloud and Systems architecture.

This individual must be able to architect and Threat Model complex applications to ensure the security and compliance of the cloud environments based on enterprise cloud security policies, standards, procedures and industry best practices and frameworks (NIST, OWASP, STRIDE) .

The candidate must have experience defining Security controls in pipelines ( Terraform Sentinel ) using CIS benchmarks, NIST framework and other security best practices

Must Have:

1 Public Cloud: AWS Experience

Deep Expertise and proven Track record in AWS Architecture and AWS Services (Compute, IAM, RDS, Resource Policies, Network, Messaging, Data Storage, CI/CD, AI/ML, ETL, Serverless, ECS/EKS). Experience with AWS security pillars, best practices and well designed architecture. Experience in AI/ML is preferable.

2 Information Security Architecture and IAC Security:

• Key experience: Application security, Threat Modelling, API Security, DevSecOps, Pipeline security, Infrastructure security, AuthN/Z, Encryption, Key Management, Data discovery and encryption, SIEM, CSPM, CWPP, Access Controls, Container Security
• Industry security standards and frameworks (OWASP, NIST CIS, FED Ramp, ISO, SOX etc.).
• Experience designing Architectures based on Security Standards and threat model the designs to identify issues and design mitigating controls.
• Develop and maintain security architecture patterns, reference architectures, design principles, and security standards aligned with enterprise security requirements.
• Define security controls for CI/CD pipelines, Infrastructure as Code (IaC), and DevSecOps processes.
• Design and implement policy-as-code controls using technologies such as Terraform Sentinel and related cloud governance and security tooling.
• Establish automated controls based on CIS Benchmarks, NIST frameworks, OWASP guidance, and enterprise security standards.

3 Threat Modeling:

• Experience Threat Modeling using industry frameworks and experience evaluating security controls for AI aplications and Platforms
• Deep expertise in STRIDE, attack trees, abuse/misuse cases, data-flow and trust-boundary analysis.
• Experience threat modeling complex applications, APIs, cloud, SaaS, and distributed architectures.
• Strong expertise in Application/API Security, IAM/AuthN/AuthZ, Data Security, Encryption/Key Management, DevSecOps, Container Security, and Cloud Security.
• Experience translating identified threats into architectural security controls.

Nice to Have:

• AWS advanced Certification (Professional, Specialty)
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP) or equivalent