POSITION SUMMARY:We are seeking a Cybersecurity & AI/Data Governance Intern to bridge the gap between security compliance and engineering. In this role you will assist in the design, audit, and implement technical guardrails that protect our infrastructure and govern our data and AI systems.
This position is ideal for an engineer who understands full-stack architectures, infrastructure-as-code, and systems administration, and wants to apply those skills to modern security engineering, Identity Governance and Administration (IGA), and secure AI deployment.
By the conclusion of this internship, you will progress beyond basic compliance tasks and actively contribute to the development of solutions addressing enterprise security and AI needs. Through your work, you will gain practical experience in implementing automated identity lifecycle management, conducting security audits for both cloud and on-premises infrastructures, and establishing data governance policies that enable the secure expansion of AI initiatives.
Profile: Cybersecurity & AI / Data Governance Intern
Department: Information Security
Schedule: Full Time
ESSENTIAL DUTIES & RESPONSIBILITIES:Identity Governance & Secure Architecture
- Audit and refine RBAC permissions across all platforms.
- Integrate and modernize Identity Providers using OIDC/SAML for secure access.
- Develop secure, reusable infrastructure templates with Terraform, Ansible, or AWS CDK to meet compliance standards.
Systems Security & Infrastructure Integrity
- Harden enterprise Linux and containerized environments.
- Configure firewall, VLANs, and network protocols to segment development, production, and HPC environments.
- Monitor logs and patch systems to address vulnerabilities.
AI & Data Governance Frameworks
- Define data workflows and ensure privacy and retention in data pipelines (LDAP/ZFS).
- Set security controls for Vision-Language Models and vector searches to prevent unauthorized data/model access.
- Oversee GPU resources and enforce usage policies to support compliance.
Preferred Technical Experience- Languages: Python, TypeScript, Java/Kotlin, or C/C++.
- Identity & Networking: Understanding of OIDC, SAML, LDAP, TCP/IP, DNS, and Firewalls.
- Infrastructure & DevOps: Practical experience with Linux systems administration (RHEL preferred), virtualization/containers (Docker, Kubernetes, Proxmox), and CI/CD automation (GitHub Actions, Ansible, Terraform).
- Database & Storage: Familiarity with caching layers (Redis/Valkey), structured/unstructured databases (SQL, MongoDB), and redundant storage file systems (ZFS).
Compensation Range:$0.01- $0.00
This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
Equal Opportunity Employer/Disabled/Veterans
According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or "apps" job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
Never miss an opportunity! Create an alert based on the job you applied for.
