CIVIE

• Architect and manage highly available, fault-tolerant systems on Microsoft Azure with multi-region redundancy and disaster recovery • Design infrastructure with strict adherence to healthcare compliance standards (e.g., HIPAA, HITRUST, SOC 2) • Provision and optimize GPU-based environments for AI/ML workloads, including large-scale model training and inference • Build secure, zero-trust architectures (private networking, encryption, identity isolation, least privilege access) • Implement backup, failover, and business continuity strategies with clearly defined RTO/RPO targets • Continuously reduce infrastructure costs through intelligent scaling, reserved capacity, spot instances, and workload optimization • Develop Infrastructure as Code (Terraform, Bicep, ARM) for repeatable, auditable deployments • Partner with AI/ML teams to productionize and scale foundational models reliably • Establish observability across systems (logging, monitoring, alerting) with proactive incident response • Conduct architecture reviews, risk assessments, and security audits

About the Role We’re looking for an AI Security Architect to define and own the security architecture for a modern platform that combines cloud infrastructure, large language models, and autonomous agents. In this role, you will establish secure-by-design patterns across Azure, AI/LLM systems, and regulated data environments, helping the company scale securely as products and capabilities evolve. This role is ideal for someone who can think across systems, set architectural direction, and partner with engineering and leadership to translate emerging risks into practical, scalable controls. What You’ll Do - Define end-to-end security architecture for cloud infrastructure, AI/LLM systems, APIs, and internal platforms - Establish security standards, reference architectures, and design patterns for engineering teams - Lead architecture reviews for new products, services, and major platform changes - Own threat modeling frameworks and guide teams in identifying and mitigating design-level risks - Design secure AI/LLM usage patterns, including model access controls, prompt handling, tool-use restrictions, agent isolation, and memory boundaries - Define zero trust architectures across identity, network, service-to-service communication, and privileged access - Architect data protection strategies including classification, encryption, tokenization, retention, and isolation - Partner with engineering leadership to embed security architecture into SDLC, CI/CD, and platform design decisions - Guide compliance architecture for regulated environments, including HIPAA, SOC 2, and related frameworks - Evaluate and recommend security platforms and controls across cloud, endpoint, identity, application, and AI layers - Drive secure multi-tenant and environment isolation strategies where applicable - Support leadership on risk strategy, prioritization, and tradeoff decisions across security and product velocity Required Expertise - 6+ years of experience in security, cloud security, platform security, or related roles, including significant architecture experience - Proven experience designing and reviewing cloud-native security architectures in Microsoft Azure - Deep understanding of identity-first security, zero trust principles, and secure distributed systems design - Experience designing security controls for AI/ML or LLM-based systems, or equivalent experience securing emerging technologies at scale - Strong expertise in threat modeling, security design reviews, and architecture governance - Experience defining security standards and scalable patterns across engineering organizations - Strong understanding of networking, IAM, encryption, secrets management, and secure application architecture - Ability to communicate risk, tradeoffs, and design decisions clearly to both technical and non-technical stakeholders Preferred Qualifications - Experience working in HIPAA-regulated environments - Experience with infrastructure as code (Terraform, ARM, or similar) - Experience securing LLM-based products, agent frameworks, or autonomous systems - Familiarity with red teaming AI systems, adversarial testing, or AI abuse scenarios - Knowledge of data security practices such as DLP, tokenization, and data governance - Experience with container, Kubernetes, and platform security - Experience with security architecture reviews at scale in high-growth or enterprise environments - Certifications such as CISSP, CCSP, Azure Security Engineer Associate, Azure Solutions Architect Expert, or similar What We’re Looking For - A systems thinker who can see across the full platform and design durable security patterns - Someone who can make high-impact design decisions under ambiguity - Strong influence and collaboration skills across engineering, product, and leadership - The ability to balance security rigor with business velocity at a strategic level - Curiosity about emerging AI threats and a practical mindset for turning risk into architecture Why Join Us - Shape the security architecture of cutting-edge AI systems and agent platforms - Drive foundational security decisions with high visibility and ownership - Work closely with engineering and leadership on meaningful platform and product challenges - Help define how secure AI systems are built in a fast-moving environment We Offer - Paid vacation, sick time, and personal days - 11 company paid holidays - Quarterly UberEats voucher - Monthly Fringe benefits - Flexible work schedules  - Education and professional development stipend - Health, dental, and vision benefits, with employer HSA contribution - Long-term, short-term, and life insurances - 401(k) with company match & profit sharing The typical base salary range for this position is $150,000 - $185,000. CIVIE provides equal employment opportunity for all applicants and employees. All qualified applicants will be considered regardless of an individual’s race, color, sex, gender identity or expression, religion, age, national origin, citizenship, physical or mental disability, medical condition, family care status, marital status, domestic partner status, sexual orientation, military or veteran status, or any other basis protected by federal, state or local laws. If you cannot submit your application due to a disability, please email hr@civie.com; we will reasonably accommodate individuals with disabilities to the extent required by applicable law.

• Implement security architecture across Azure (networking, identity, compute, storage) • Support developers in securing AI/LLM systems, including model access, prompt handling, data leakage prevention, and abuse mitigation • Maintain detection and response capabilities (SIEM, EDR, SOAR) • Lead threat modeling and risk assessments for new features, especially AI agents and APIs • Implement and enforce security controls for regulated environments • Manage identity and access controls (Azure AD / Entra ID, RBAC, least privilege) • Investigate and respond to security incidents • Partner with engineering to embed security into CI/CD pipelines and SDLC • Conduct security reviews of infrastructure-as-code, APIs, and application architecture • Drive compliance efforts (HIPAA, SOC 2, HITRUST, NIST and related frameworks) • Evaluate and integrate security tools across cloud, endpoint, and application layers • Work with technical teams on implementing patches and vulnerabilities management