Senior Security Architect, AI

This is a fully remote position, open to applicants in United States.

📋 Description

• Define the secure design, deployment, and governance of AI and Machine Learning systems across the enterprise and Paylocity product portfolio.

• Act as the subject matter expert in AI/ML security and serve as a trusted advisor to teams in Product & Technology, Data Science, Procurement, Enterprise Applications, Legal, and Privacy.

• Ensure the confidentiality, integrity, and availability of AI/ML platforms, models, data pipelines, and interconnected systems and data.

• Develop and implement AI security risk assessment frameworks, intake tools, scoring logic, control mappings, and assessment automation.

• Represent AI security on the AI Governance Committee and the Architecture Review Board.

• Lead threat modeling for AI/ML and create secure design patterns and reference architectures for LLM, RAG, and agentic AI workflows.

• Evaluate, pilot, and operationalize AI security tools including LLM firewalls, prompt injection defenses, AI-SPM, red-teaming platforms, and AI-BOM tools.

• Conduct security reviews and provide architectural guidance for AI use cases in products and corporate settings.

• Integrate AI security guardrails and testing into the Product Development Lifecycle and CI/CD pipelines.

• Collaborate with cloud, application, and DevSecOps teams to implement robust AI infrastructure patterns across Snowflake, Azure OpenAI, AWS Bedrock/SageMaker, and GCP Vertex AI.

• Align AI capabilities with relevant regulatory and industry frameworks to support audit readiness and evidence generation.

• Communicate AI security risks, trends, and architectural decisions to executives, governance committees, architecture boards, and the Board.

• Assist with product security, threat management, DevSecOps, incident response, and M&A due diligence activities as required.

⛳️ Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Science, Data Science, or a related field.

• Over 10 years of experience in Security Architecture, Information Security, or similar technical roles.

• Minimum of 2 years specifically focused on AI/ML, Generative AI, or Agentic AI security.

• Proven experience in architecting and securing AI/ML systems and supporting platforms.

• In-depth knowledge of at least one relevant security framework or methodology, such as NIST CSF, NIST AI RMF, NIST RMF, SP 800-53, MITRE ATT&CK, MITRE ATLAS, OWASP LLM Top 10, OWASP ML Top 10, STRIDE, DREAD, or PASTA.

• Experience in designing reusable AI security frameworks and influencing cross-functional teams and leadership.

• Familiarity with financial services, FinTech, or HR-tech regulatory environments, as well as sensitive payroll, HR, and benefits data.

• Experience in evaluating current and emerging AI technologies and recommending secure architectural solutions.

• Exceptional written and verbal communication skills for both technical and executive audiences.

• A risk-based mindset that balances innovation with security.

• Ability to work independently and lead initiatives from concept through execution.

• Practical knowledge of AI/ML platforms and frameworks including OpenAI, Anthropic Claude, Azure OpenAI, AWS Bedrock/SageMaker, Google Vertex AI, Hugging Face, LangChain, LangGraph, vector databases, and Snowflake Cortex.

• Familiarity with AI security frameworks and standards such as NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, OWASP ML Top 10, MITRE ATLAS, Google SAIF, or Databricks AI Security Framework.

• Knowledge of GenAI, RAG, and agentic AI security, covering prompt injection defenses, output filtering, access controls, data leakage prevention, provenance, agent identity, A2A security, PKI, API security, service mesh, and MCP security.

• Cloud security experience across AWS, Azure, and GCP, including Kubernetes, container orchestration, and cloud workload protection.

• Understanding of identity and access management, including Active Directory, PAM, PKI, SailPoint/IAP, non-human identity, and secrets management.

• Knowledge of data protection measures, including AI data classification, labeling, DLP, tokenization, and handling of PII/PHI.

• Experience with monitoring and response strategies, including SIEM/SOAR, AI/LLM observability, model drift and abuse monitoring, Shadow AI detection, and WAFs.

• Experience in DevSecOps and automation with a focus on embedding SAST, DAST, APE, and secrets scanning into CI/CD processes.

• Proficiency in scripting languages such as Python, PowerShell, or Bash.

• Ability to sit for extended periods, typically 7–8 hours per day.

• Capability to operate computers and phone systems, type, and utilize multiple software programs simultaneously.

• Preferred certifications include CISSP, CISM, specialized AI/ML security, cloud security, AI governance, architecture, or risk management.

🏝️ Benefits

• Medical insurance

• Dental insurance

• Vision insurance

• Life insurance

• Disability insurance

• 401(k) match

• Perks supporting employees, families, and finances

• Career development opportunities

• Annual bonus eligibility

• Restricted stock unit grant based on individual performance

• Reasonable accommodations for applicants and employees with disabilities