AI Platform & Security Engineer

117090 SGA Dental Partners OPCO LLC; United States; Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Paid Holidays

401(k) Retirement Plan

Health & Vision Insurance

Dental Insurance (employer-paid)

Life Insurance

Care.com Membership & EAP

Disability & Critical Illness Coverage

Career Growth Opportunities

Job summary

SGA Dental Partners seeks an AI Platform & Security Engineer to design, implement, and secure the AI environment across practice networks and corporate teams. You will establish guardrails, central hosting, and identity/secrets management while enabling rapid yet compliant AI adoption.

Expect PHI safeguards, automated scanning, and robust governance in a fast‑growing healthcare setting. Remote work is allowed for designated states; heavy cross‑functional collaboration with Enterprise

Qualifications

• 4+ years in software/platform/security engineering with production ownership.
• Experience with healthcare or regulated data environments preferred.
• Knowledge of SQL/PostgreSQL or similar relational databases is a plus.

Responsibilities

• Administer the enterprise LLM platform with identity management and controls.
• Build and operate the AI integration layer and secret management across environments.
• Define standard patterns for agents and secure development practices for AI workloads.
• Maintain least-privilege access and cost tracking for AI platforms.

Skills

AI Platform

Security engineering

Cloud platforms

Identity providers

HIPAA knowledge

DevSecOps

Education

Bachelor's degree in CS

Tools

GitHub

Cloudflare

Railway

Microsoft 365

Azure

Power BI

Entra ID

Job description

The AI Platform & Security Engineer will help design, build, operate, and secure SGA Dental Partners' AI environment. As at many companies, AI is increasingly part of SGA's daily business operations, with hundreds of dental practices and a robust corporate team looking to quickly and securely adopt this new technology. This role is responsible for implementing guardrails and other technical controls that allow internal teams to quickly implement AI while maintaining security and compliance baselines. The AI Platform & Security Engineer will serve as a key member of the Enterprise Architecture & Security team, working alongside other departments and business stakeholders. Priorities include establishing and centralizing hosting infrastructure, code repositories, identity provider strategy, secrets management, and source control for AI workloads. Later work will focus on automated scanning, agent evaluation, security hardening, and policy enforcement so that approved patterns can be deployed without manual review.

Pay: $125,000 - $150,000

Schedule: full time, Mon - Fri 8 - 5

Key Responsibilities

• Administer the enterprise LLM platform, including identity management, provisioning, licensing, usage monitoring, and controls.
• Build and operate the AI integration layer: MCP server and connector management, service principals, service accounts, API and secrets management, sandbox and production environments, custom and third-party integrations (Microsoft Entra, Graph, etc).
• Establish and document standard patterns for agents, so that new agents follow an approved design.
• Configure model routing across cloud providers with PHI handling requirements integrated from the beginning.
• Implement automated scanning of code and agents built by users, agent evaluation and testing, and PHI guardrails enforced in the delivery pipeline.
• Establish secure development practices for AI and internally developed software, including secrets scanning, sensitive-data detection in repositories, dependency review, and pre-commit controls.
• Implement and tune data loss prevention tools and access controls for AI traffic and AI-connected systems.
• Produce technical evidence in support of HIPAA and financial-controls requirements as part of normal system design.
• Lead technical remediation when sensitive data is found outside approved locations.
• Build, operate, and harden cloud environments that host internal applications, dashboards, and AI-powered services.
• Maintain least-privilege access across identity and access management, secrets lifecycle, source control, and deployment paths for all AI workloads.
• Build self-service infrastructure so that approved options are readily available to teams.
• Onboard users and teams onto the platform, deploy environments, and troubleshoot with users.
• Convert repeated requests into self-service capabilities and documentation through secure and compliant automation.
• Use AI coding tools (Claude Code, Codex, or equivalent) as a primary development workflow and help other engineers adopt them effectively, implementing best practices and DevSecOps principles.
• Maintain the internal code and library standards for AI workloads: shared modules, dependency management, versioning, testing, and documentation, so that code built across teams is consistent, reviewable, and supportable.
• Participate in change management and documentation for infrastructure, integrations, and controls.
• Escalate risks and control gaps to the Director of Enterprise Architecture & Security.

Knowledge/Skills/Abilities

Daily, fluent use of AI coding tools (Claude Code, Codex, GitHub Copilot, or equivalent). Hands-on experience with major cloud platforms (Azure preferred) and modern identity providers (Entra ID, OAuth, service principals). Working knowledge of secure development practices: secrets management, static analysis, dependency scanning, and code review. Ability to read and reason about unfamiliar code quickly. Understanding of HIPAA as it applies to engineering architecture and data governance, or the ability to learn it quickly. Familiarity with LLM application patterns such as agents, tools / skills, retrieval, MCP connectors, and agent evaluation. Strong written communication; a significant part of the work is producing documentation, standards, and control evidence, along with occasional presentations or internal memos. Disciplined coding practices: modular design, reuse over duplication, clear naming, tests, and documentation written for the next engineer rather than the current one. Track and optimize AI platform spend, including seat, token, and infrastructure costs; identifying where existing tools can meet a need before AI implementation or additional spend is considered. Ability to work with non-technical stakeholders or executives and translate requirements into secure designs. Self-directed, with sound judgment about when to proceed and when to elevate. Comfortable handling requests from stakeholders while following proper approval policies and workflows. Strong ability to understand and follow corporate policy, procedures, and standards, with an emphasis on change management.

Education & Experience

Minimum of 4 years in software, platform, and/or security engineering with production ownership. Bachelor's degree in computer science, information systems, or related field / experience. Experience in healthcare, dental, or another regulated-data environment is preferred. Experience working with SQL, Postgres, or other similar relational databases is preferred. Security certifications (Security+, CISSP, CCSP, AAISM, SecAI+, or similar) are a plus. Experience with GitHub, Cloudflare, Railway, Microsoft 365, Azure, or Power BI is a plus. Experience in a fast-growing, multi-site organization is a plus. Prior IT experience is a plus.

Benefits We Offer

• Paid Holidays and Paid Time Off (PTO)
• 401(k) Retirement Plan
• Health and Vision Insurance
• Employer-Paid Dental Insurance, Life Insurance, Care.com Membership & Employee Assistance Program
• Supplemental Coverage (Disability, Critical Illness, Accident)
• Career Growth and Development Opportunities

This position is eligible for remote work in the following states: Alabama, Arizona, California, Colorado, Florida, Georgia, Illinois, Indiana, Kansas, Kentucky, Louisiana, Maryland, Michigan, Minnesota, Mississippi, Missouri, Nevada, New Mexico, North Carolina, Ohio, Pennsylvania, South Carolina, Tennessee, Texas, Utah, Virginia, Washington, Wisconsin.

In hometown communities, SGA Dental Partners is a beacon of positive energy, delivering the highest level of clinical excellence and patient-centered care.

All new hires are required to pass a full panel drug screening as a condition of employment.

SGA Dental Partners is an Equal Opportunity Employer and values diversity at every level of our team.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

In hometown communities across the country, SGA Dental Partners is a beacon of positive energy, making a meaningful difference in the lives of patients, team members, and the communities we serve. Built through the coming together of long respected dental practices, we are united by a shared commitment to clinical excellence, compassionate care, and a people first culture. At SGA, we believe in continuous improvement because we know that when our people grow, our care gets better. Guided by our Empower Improvement mindset and our belief that we get better every day, we invest in our teams through development, collaboration, and leadership opportunities. Whether you are early in your career or an experienced professional, you will find an environment that supports growth, recognizes contribution, and encourages innovation.