Senior Technical AI Security Architect

Hi Everyone,
AI is moving fast and someone needs to make sure it moves safely. We're looking for a hands-on security architect to own the frontier: threat modeling LLM pipelines, hardening Azure AI Foundry, and building the governance framework that keeps autonomous agents in check. This isn't a policy role. It's engineering at the edge of what's possible.
Senior Technical AI Security Engineer/ArchitectLinkedIn, SSN, DOBLocation: Boston MA USC and GC and H1B6+ Months Local consultant We are seeking a senior Security Engineer/Architect specializing in AI/LLM and cloud-native platforms experience to help assist in the strategic evaluation and secure implementation of our AI Agent Framework.

Senior Security Engineer who has good(Recent) Machine Learning/Artificial Intelligence Exp.With hands on experienced in engineering secure architectures for AI agent frameworks, including threat modeling for prompt injection, RAG poisoning, and data leakage.Hands-on in implementing security controls across CI/CD, Kubernetes, and cloud platforms, with growing focus on Azure AI services, identity (Entra ID), and governance standards for enterprise AI adoption.Proven ability to translate emerging AI risks into scalable security patterns, policies, and platform guardrails.
This is an exciting opportunity, and you will be evaluating new and emerging AI technologies—with hands-on engineering.Reporting into the Director of Security, you will research security controls, validate emerging architectural patterns, and define the governance standards for M365 Copilot Agents and autonomous agents built on Azure AI Foundry.
Required Qualifications:Hands on experience Engineering or Architectural skills:* 5+ years in Cloud Security/Architecture with deep hands-on Azure platform experience.* AI Specialization: Hands-on experience with Azure AI Services, Azure OpenAI, and Azure AI Foundry (or similar platforms like AWS SageMaker).* Modern Identity: Expert-level understanding of Microsoft Entra ID, Service Principals, and Managed Identity in a complex enterprise environment.* Emerging Protocols: Deep familiarity with Model Context Protocol (MCP) and its implications for data isolation and session security.* GenAI/LLM Expertise: Strong grasp of RAG (Retrieval-Augmented Generation) patterns and vector database security. Security Implementation & Strategy* Zero Trust: Proven track record of implementing Zero Trust controls in financial services or cloud-native environments.
Primary Responsibilities:Technology Evaluation & Security Architecture* Emerging Tech Research: Proactively evaluate new AI tools, frameworks, and LLM providers to assess their security posture and suitability for a highly regulated investment environment.* Architectural Design: Design and validate secure architectural patterns for AI agent integration within the organization’s ecosystem, ensuring data privacy and IP protection.* Threat Modeling: Conduct deep-dive analysis of AI-specific threats (prompt injection, model inversion, data poisoning) and architect systemic mitigations.* Platform Assessment: Evaluate the security capabilities of Azure AI Foundry, M365 Copilot Studio, and the Microsoft Graph API against the organization’s compliance standards.* MCP Specialization: Assess Model Context Protocol (MCP) security best practices, designing isolation strategies for context management.* As a security architect assist with evaluations of other technologies being evaluated with via our Enterprise Architecture Review Board
Technical Implementation & Validation* Hardening & Standards: Create hardening checklists and configuration standards for AI platforms that bridge the gap between innovation and rigorous risk management.* Identity & Integration: Test and document sophisticated integration approaches with Azure Key Vault, Entra ID, and Managed Identities.* Security Telemetry: Implement advanced logging, auditing, and monitoring for AI agent telemetry to ensure visibility into autonomous actions. Governance & Standards Development* Design Principles: Lead the creation of the organization’s AI Agent Security Design Principles document.* Policy Authoring: Working with various teams assist in developing technical sections of governance policies that address the risks of emerging AI technologies and autonomous workflows.* CI/CD Integration: Identify and bridge control gaps in existing CI/CD pipelines to support secure, automated AI deployments.* Stakeholder Collaboration: Translate complex security architectures into actionable implementation guides for developers and investment tech teams.

Security Implementation & Strategy* Zero Trust: Proven track record of implementing Zero Trust controls in financial services or cloud-native environments.* Automation: Experience with Infrastructure as Code (Terraform, Bicep) to codify security guardrails.* Threat Assessment: Familiarity with the OWASP Top 10 for LLMs and AI-specific vulnerability scanning.
Preferred Qualifications:* Certifications: Azure Security Engineer Associate, Azure AI Engineer Associate, or CISSP/CCSP.