Senior Security Architect: Cloud, OT & AI

Hexion Inc.; Columbus (OH); On-site; USD 130,000 - 185,000; Full time

Job summary

Hexion Inc. is seeking a Security Architect to design and govern the security architecture across on‑prem, Azure, AWS, AI/ML, OT, and physical security domains. You will own reference architectures, standards, and safety‑driven controls, collaborating with engineering teams to translate policy into secure, scalable implementations.

The role emphasizes architecture over compliance, applying ISO/IEC 27001 family and 42001 for AI governance, with travel to manufacturing facilities as required.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field (or equivalent practical experience).
• 8+ years in information security with at least 4 years in a dedicated security architecture or senior security engineering role.
• Demonstrated experience architecting security for both on‑premises infrastructure and public cloud at enterprise scale.
• Hands‑on architectural depth in both Microsoft Azure and Amazon Web Services — identity, networking, encryption, and native security services in each.
• Working fluency with ISO/IEC 27001 and Annex A controls as an architectural framework, including practical application of ISO/IEC 27017 and 27018 to cloud designs.
• Familiarity with ISO/IEC 42001 and the AI security threat landscape, with experience designing controls for AI or machine learning systems
• Understanding of OT and industrial control system architecture, including ISO/IEC 27019, IEC 62443, or NIST SP 800‑82 concepts
• Experience with physical security systems and the integration of physical and logical access control
• Strong identity architecture skills — Active Directory, Entra ID, SAML and OIDC federation, privileged access management, and non‑human identity models
• Network security design depth — segmentation, zero trust architecture, firewalls, proxies, and secure connectivity across hybrid environments
• Proficiency with threat modeling methodologies (STRIDE, PASTA, attack trees) and the ability to produce clear architectural documentation and diagrams
• Strong written and verbal communication — able to defend a design to engineers and explain the same decision to executives

Responsibilities

• Own The Security Architecture Of Hexion’s On‑premises Estate: design reference architectures for network segmentation, zero trust access, remote access, and data center security; define security architecture standards for endpoints, servers, virtualization, backup, and disaster recovery; lead the architectural review function and document exceptions with compensating controls; design detection and logging architecture with telemetry across on‑premises and cloud estates.
• Cloud Security Architecture (Azure and AWS): architect landing zones, account structures, network topology, and guardrails; design cloud identity architecture including federation and least‑privilege IAM; apply ISO/IEC 27017 and 27018 controls for cloud security and data protection; define encryption and key management across Azure Key Vault, AWS KMS, and on‑premises HSM; establish policy‑as‑code and infrastructure‑as‑code security patterns; architect CSPM/CWPP coverage and secure connectivity between cloud and on‑premises.
• AI Security Architecture (ISO/IEC 42001): define reference architectures for enterprise AI use cases; apply governance framework for AI management; design controls for AI threat models; establish data protection boundaries for AI; define identity, authorization, and audit architecture for AI agents; establish review patterns for AI use cases and third‑party AI vendors.
• OT & Process Control Security Architecture: partner with engineering and plant operations to secure industrial environments; apply ISO/IEC 27019 and IEC 62443 concepts; define standards for OT monitoring and safe patching; support plant modernization without compromising safety; translate enterprise security standards for plant floor implementation.
• Physical Security Architecture: security architecture for physical access control, video surveillance, intrusion detection, visitor management; converge physical security with enterprise identity; address network/lifecycle security of physical devices; define physical security requirements for data centers and facilities.
• Standards, Patterns & Technical Governance: author and maintain security standards, design patterns, and baselines; contribute security architecture requirements to ISMS and AI management; conduct threat modeling and architectural risk assessments; mentor engineers and analysts; support vendor selection and third‑party integrations.
• Leadership Expectations: act as enterprise technical authority on security architecture; influence without direct authority; collaborate with Compliance and Risk; represent architecture in forums and vendor evaluations; document decisions under uncertainty; raise architectural fluency across the organization.

Skills

Security architecture

ISO/IEC 27001

Azure

AWS

IAM and identity

Zero trust

Threat modeling

OT security

Cloud security

Communication

Education

Bachelor’s degree in Computer Science, Information Security, Engineering, or related field

Tools

Terraform

CloudFormation

Bicep

Azure Key Vault

AWS KMS

Job description

Hexion Inc. is seeking a Security Architect to design and govern the security architecture across on‑prem, Azure, AWS, AI/ML, OT, and physical security domains. You will own reference architectures, standards, and safety‑driven controls, collaborating with engineering teams to translate policy into secure, scalable implementations.

The role emphasizes architecture over compliance, applying ISO/IEC 27001 family and 42001 for AI governance, with travel to manufacturing facilities as required.