Cloud Security Engineer - AI Platform

Duties

• Design and operate the Azure cloud environment for the AI platform: subscriptions, networking, private endpoints and landing zones.
• Implement identity and access for people, applications and AI agents, including agent identities, least-privilege permissions and on-behalf-of access to source systems.
• Build security controls into the platform: secrets management, encryption, data loss prevention, sensitive-data handling and an agent kill-switch.
• Implement AI guardrails and policy enforcement in partnership with Compliance, Risk and Information Security.
• Monitor for threats and misconfigurations, respond to security events and support audits and client due diligence.
• Manage cloud cost and capacity for AI workloads.

Requirements

• 5+ years in cloud engineering or cloud security, with strong Azure experience.
• Hands-on knowledge of Microsoft Entra ID, Key Vault, Azure networking, Defender for Cloud and Azure Policy.
• Experience securing applications that handle confidential financial or personal data.
• Working knowledge of security frameworks and regulatory expectations in financial services (for example, SOC 1/SOC 2 and data-privacy requirements).
• Infrastructure as code and scripting experience.

Nice to have

• Experience securing LLM or AI applications, including prompt-injection and data-leakage risks.
• Microsoft security or Azure certifications (for example, AZ-500, SC-100) or CISSP.
• Background in fund administration, asset management or banking.

Our technology

Microsoft Azure (AKS, API Management, Service Bus, Key Vault, Entra ID, Azure AI services), Snowflake, MCP servers, Python and .NET, Azure DevOps, and leading large language models.