If the base beneath your CMS is not fast and secure your CMS will be compormised. Also check out Magnolia it is a powerful and interesting CMS that is java servlet deployed.
Now that mod_security has added support for Nginx I can see no better option. Fast, flexible and secure. Maybe varnish if you really need it out front, but Nginx can do 90% of that anyway