• Manages the technical foundation of Sedgwick’s enterprise web platform • Ensures that Sedgwick’s web ecosystem remains discoverable, performant, scalable, and resilient • Establishes and enforce platform standards that prioritize stability, scalability, security, and maintainability • Partners with web team members to ensure themes, blocks, and UX decisions align with Sedgwick platform standards • Reduces platform risk by minimizing custom one-off solutions and technical debt • Serves as the technical lead and reviewer for external development partner work to ensure contributions align with Sedgwick platform standards • Leads the technical implementation of SEO and AIO strategy across the platform • Partners with Analytics stakeholders to respond to Core Web Vitals and SEO regressions with durable technical fixes • Governs all web content management system plugins and third‑party integrations by evaluating, approving, upgrading, and retiring plugins • Owns integrations with systems such as analytics and data layer plugins, consent management tools, marketing and form platforms, and language translation tools • Owns platform-level performance outcomes, including Core Web Vitals remediation and prevention • Defines website release requirements, including SEO/AIO and Core Web Vitals impact checks, plugin and dependency validation, and rollback expectations

Role Description We are looking for a Senior Platform and Security Engineer to own the Azure infrastructure, IT operations, and technical implementation of security controls that underpin our Claims Intelligence Platform. This is a hands-on individual contributor role with a potential path toward team leadership as the company grows. You will work closely with the engineering team on platform changes and directly with leadership on SOC 2 Type 2 and HIPAA audit preparation. Essential Duties and Responsibilities - Azure Platform Ownership - Own infrastructure for all Azure resources across development, UAT, and production environments. - Manage and evolve Azure DevOps pipelines for build, test, and deployment. - Operate Azure Container Apps, App Service, Service Bus, Azure Database for PostgreSQL Flexible Server, Blob Storage, and supporting services. - Maintain Azure Key Vault including secrets rotation and enforcement of least-privilege access. - Configure and tune Application Insights and Log Analytics, including PHI-safe logging pipelines that prevent sensitive data from appearing in telemetry. - Security Controls and Compliance - Implement and maintain technical controls in support of SOC 2 Type 2 and HIPAA compliance programs. - Administer Entra ID including conditional access policies, MFA enforcement, group lifecycle management, and identity governance. - Partner with leadership on audit preparation, evidence collection, and control documentation. - Contribute to incident response readiness, including tabletop exercises and runbook development. - Manage logging and alerting functions through Microsoft Purview and Microsoft Sentinel, including alert tuning, analytics rules, and data connector configuration. - Maintain and improve the organization’s security posture through vulnerability management, access reviews, and security monitoring. - IT Operations - Own Office 365 administration, SharePoint configuration, and SaaS tool management for the organization. - Serve as the internal technical authority on endpoint security, device management, and employee access provisioning. - Evaluate and onboard new tooling as the company scales, with a bias toward security and operational simplicity. Technical Environment - Infrastructure: Azure Container Apps, Azure App Service, Azure Service Bus, Azure Database for PostgreSQL Flexible Server, Azure Blob Storage - Security and Identity: Azure Key Vault, Microsoft Entra ID, Microsoft Defender, Azure Policy - Observability and Security Operations: Application Insights, Log Analytics Workspaces, Microsoft Sentinel, Microsoft Purview - CI/CD: Azure DevOps pipelines - Productivity: Microsoft 365, SharePoint, Teams - Compliance targets: SOC 2 Type 2, HIPAA Qualifications - 7–10 years in cloud platform engineering, DevOps, or infrastructure security. - Hands-on production Azure experience across the full service lifecycle, not just resource provisioning. - Practical experience implementing technical controls for HIPAA and SOC 2 Type 2. - Fluent in Entra ID: conditional access, MFA, role assignments, and identity governance. - Applies appropriate safeguards for protected health information, including PHI-safe logging pipelines, data isolation, and least-privilege access controls. - Comfortable owning IT operations end-to-end: M365, SaaS administration, and employee access management included. - Brings a point of view. This role requires someone who assesses the environment, identifies gaps, and recommends a path forward. - Energized by doing the work. This is a hands-on role with full ownership of the platform and security posture. - Healthcare or regulated industry background is a genuine advantage. - Comfortable incorporating AI-assisted tools and workflows into day-to-day work to improve speed and quality.

• Support the infrastructure and platform layer of a modern AI-driven application • Collaborate with U.S.-based teams on high-impact data systems in production • Work independently on production data pipelines and troubleshoot live systems • Take ownership in a small team environment with a focus on data quality and modeling

• Build and run the internal platform that runs AI agents alongside human engineers • Shape how AI tooling evolves within the company • Decide the architecture, ship infrastructure as code, and own runbooks • Scope, build, and ship internal tools, dashboards, AI agents, and workflow automations • Partner with department leads to identify AI needs and design workflows • Manage identity, endpoint management, and access reviews to keep the team productive • Translate stakeholder problems into technical specifications