AI Security Architect

Coforge; United States; On-site; USD 130,000 - 160,000; Full time

Job summary

Coforge is seeking an experienced AI Security Architect to lead the end-to-end security architecture for its Agentic AI platform. This role is key in addressing the security mandates for AI systems, blending AI security architecture with Data Security Posture Management (DSPM).

The responsibilities include defining the security architecture, establishing data sensitivity labels, and securing AI workloads across a multi-cloud environment. Ideal candidates will have deep Azure security experience, be hands-on with multi-cloud setups, and possess a proven track record in regulated environments.

Qualifications

• Deep experience with Azure/M365 security architecture.
• Hands-on understanding of multi-cloud setups.
• Proven track record in enterprise-scale secure architectures.

Responsibilities

• Define and own the AI reference security architecture.
• Operate Microsoft Purview DSPM for AI.
• Design and secure workloads across Azure and AWS.

Skills

AI Security Architecture Frameworks

Microsoft Purview DSPM

Azure Security Architecture

Multi-cloud Security

Data Security Posture Management

Tools

Microsoft Sentinel

AWS Lambda

Microsoft Defender for Cloud

Job description

Key Skills: AI Security Architecture Frameworks

Location: United States

We at Coforge are hiring an experienced AI Security Architect to lead the end-to-end security architecture for Agentic AI platform and own the data security mandate for AI systems.

This is a strategic leadership role combining Agentic AI security architecture and Data Security Posture Management (DSPM) into a single accountable owner responsible for securing both the platform and the data lifecycle.

Key Responsibilities

• Define and own the agentic AI reference security architecture (v1 and beyond), including Platform 1.0 hardening.
• Stand up and operate Microsoft Purview DSPM for AI, accelerated via Microsoft FastTrack.
• Establish the sensitivity-label and ML auto‑classification baseline; map and govern data flows into and out of agents.
• Set architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure agentic AI workloads across a multi‑cloud estate spanning Azure and AWS, ensuring consistent controls regardless of where agents are built and run.
• Partner with the identity, AppSec, and GRC functions to ensure controls are designed in, not bolted on.

Qualification

• Deep Azure / M365 security architecture experience; Microsoft Sentinel, Entra, Defender for Cloud.
• Hands‑on understanding of how to build and secure agents in a multi‑cloud setup, including AWS (e.g., Bedrock Agents, AWS Lambda, IAM) alongside Azure.
• Hands‑on Microsoft Purview — DSPM for AI, sensitivity labels, data‑flow mapping, MLbased auto‑classification.
• API and agent architecture security; familiarity with Copilot Studio / agent platforms.
• Proven track record designing enterprise‑scale secure architectures in a regulated environment.

Good to Have

• Experience in life sciences, medical device, or other regulated manufacturing.
• Relevant certifications (e.g., CISSP, Azure Security Engineer, SC-100).