AI Systems Engineer

WebMD; El Segundo (CA); On-site; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health Insurance

401(k) Retirement Plan

Paid Time Off

Life and Disability Insurance

EAP

Job summary

WebMD is seeking a senior AI Systems Engineer to manage the hybrid infrastructure and AI operations stack. You will own AI platform integrations, MCP servers, and ensure proper hardening and governance with existing enterprise security.

The ideal candidate bridges infrastructure expertise with hands-on AI engineering, deploying systems across Windows Server, cloud platforms, and on-premise environments while maintaining security and identity controls.

Qualifications

• Experience across the full infrastructure stack including network, security, storage, hardware, and OS.
• Deep Windows Server administration, configuration, upgrades and lifecycle management.
• PowerShell scripting for automation, provisioning and reporting.
• DNS/DHCP administration including DNSSEC and zone management.
• Experience with enterprise backup tools and DR planning.
• Virtualization experience with VMware or Hyper-V.
• IAM tooling, EntraID/AzureAD SSO, MFA and privileged access management.
• AI platform deployment and governance across enterprise environments.
• Ability to document and runbooks for complex systems.

Responsibilities

• Infrastructure Operations: maintain servers, storage, DR plans and on-call readiness.
• AI Systems Governance: deploy and manage enterprise AI platforms and MCP servers.
• Security & Compliance: implement governance, access controls, and monitoring.
• Collaboration: coordinate with IT leadership and business units on large projects.
• Documentation: produce runbooks and architecture diagrams.

Skills

Windows Server administration

PowerShell scripting

DNS and DHCP administration

Enterprise backup tools

VMware/Hyper-V

Security patch management

Cloud/hybrid data migration

Documentation & runbooks

IAM / EntraID / SSO

AI platform deployment

Connector governance

Platform security assessments

SIEM monitoring

Tools

Google Workspace

GCP

Office 365

Azure

EntraID / AzureAD SSO

SAML/OIDC

Airtable

Atlassian

GoogleDrive

Gmail

Terraform

Job description

WebMD is the most recognized and trusted brand of health information and the leading provider of health information services, serving consumers, physicians, healthcare professionals, employers and health plans through our public and private online portals and WebMD the Magazine. The WebMD Health Network includes WebMD, Medscape, MedicineNet, eMedicine, RxList, theheart.org and Medscape Education. Our consumer portals and mobile health applications provide engaging, relevant and credible health and wellness information, personalized health assessment tools and access to online communities.WebMD is an Equal Opportunity/Affirmative Action employer and does not discriminate on the basis of race, ancestry, color, religion, sex, gender, age, marital status, sexual orientation, gender identity, national origin, medical condition, disability, veterans status, or any other basis protected by law.

PositionOverview

TheAI&SystemsEngineerisahybridinfrastructureandAIoperationsroleresponsibleformanaging thefullenterpriseITstackwhilealsoarchitecting,deploying,securing,andgoverningAIsystemsacross theorganization.ThisroleservesastheprimarytechnicalownerforAIplatformintegrations-including largelanguagemodels,MCPservers,andconnectorecosystems-alongsidetraditionalsystemsadministrationresponsibilitiescoveringWindowsServer,cloudplatforms,networkinfrastructure,andenterprise security.Theidealcandidatebridgesdeepinfrastructureexpertisewithhands-onAIengineering,ensuringAIsystemsaredeployedwith rigor, properlyhardened,andtightlyintegratedwithexistingenterpriseidentityandsecuritycontrols.

Position Requirements:

Infrastructure & Systems Administration

• Experienceacrossthecompleteinfrastructurestack:network, security,storage,hardware,andOSlayer
• ExpertisewithWindowsServeradministration,configuration,upgrades,andlifecycle management
• DeepexpertiseinPowerShellscriptingforautomation,provisioning,reporting,andsystemsmanagement
• ExpertiseinDNSandDHCPadministration,includingWindowsServerDNSroles,zone management,conditionalforwarding,split-brainDNS,andDNSSEC
• ExperiencewithenterprisebackuptoolsincludingNetApp;buildingDRenvironmentsand failoverplans
• Proficiencywithvirtualizationplatforms:VMwareand/orHyper-V
• Experiencemanagingandmaintainingsecuritypatchesacrossserverandapplicationestates
• Experiencemigratingdataacrosscloud,hybrid,andon-premisesenvironments
• Abilitytoplan,organize,anddocumentcomplexsystemmaintenanceactivities;configure systemsconsistentwithinstitutionalpoliciesandprocedures
• Comfortablewithon-callschedulesandresponsetocriticalalertsinatimelymanner

Cloud & Productivity Platforms

• ExperiencewithGoogle Workspace administration(userlifecycle,OUmanagement,GAMscripting)
• ExperiencewithGoogleCloudPlatform(GCP)infrastructureandservices
• ExperiencewithMicrosoft Office 365administrationincludinglicensing,ExchangeOnline,andcompliance
• ExperiencewithMicrosoftAzureincludingEntraID(formerlyAzureAD),ConditionalAccess,PIM,andAzureresourcemanagement
• FamiliaritywithsettingupandconfiguringapplicationswithAzureSSOorGoogleSSO(SAML,OIDC,OAuth2.0)

AI Systems Engineering & Operations

• Hands-onexperiencedeploying,configuring,andadministeringlargelanguagemodel(LLM) platformsincludingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini acrossenterpriseenvironments
• ExperiencearchitectingandadministeringMCP(ModelContextProtocol)serverinfrastructure: deployingMCPserverinstances,configuringtoolregistries,managingconnectorecosystems (Airtable,Atlassian,GoogleDrive,Gmail,andothers),andintegratingMCPserverswith enterpriseidentityandaccesscontrols
• AbilitytodesignandenforceAIconnectorgovernancepolicies:scopemanagement,permission auditing,credentiallifecycle,andconnectoraccessreviews
• ExperienceperformingAIplatformsecurityassessmentscoveringpermissionscopes,data flows,outputvalidationpipelines,promptinjectiondefenses,andHITL(Human-in-the-Loop) controls
• FamiliaritywithAIhardeningprinciples:modelaccesscontrols,ratelimiting,WAFintegration,APIgatewayconfiguration,sessioncontrols,andkillswitchhierarchiesforAIsystems
• ExperienceconfiguringandmonitoringSIEMdetectionrulesforAIplatformactivityandanomaly detection
• UnderstandingofresponsibleAIdeployment including data residency requirements, privacy-by-design, audit logging, and regulatory alignment (HIPAA,GDPR as applicable)
• Abilitytoevaluate new AI tools and platforms against enterprise security standards prior to production deployment
• Experienceauthoring AI systems documentation:architecture diagrams,runbooks,security assessments,and governance policies

Security & Compliance

• Knowledgeofapplicabledataprivacypractices,laws,andregulations(HIPAA,SOC2,GDPRfundamentals)
• Experiencewithidentityandaccessmanagement(IAM)tooling:EntraID,Active Directory,SAML/OIDCfederation,MFAenforcement,andprivilegedaccessmanagement
• Familiaritywithnetworksecurityconceptsincludingfirewallpolicy,VPNadministration,WAFconfiguration,andzero-trustnetworkaccessmodels
• ExperiencewithendpointmanagementusingMicrosoftIntuneorcomparableMDMsolutions

Certifications & Nice-to-Have

• CertificationsinVMware,Hyper-V, MCSE,MCSA,orAWS/AzureSolutionsArchitectaredesirable
• CertificationsorcourseworkinAI/MLplatforms,promptengineering,orresponsibleAIareaplus
• Experiencewithinfrastructure-as-codetooling(Terraform,Bicep,orcomparable)is advantageous
• FamiliaritywithSIEMplatforms(MicrosoftSentinel,Splunk,orsimilar)forsecuritymonitoring
• ExperiencewithacquisitionITintegration:userprovisioning,mailboxmigrations,SSOfederation, anddirectoryconsolidation

Roles & Responsibilities

Infrastructure Operations

• Providetechnicalsupporttocorporatebusinessunitsandsupporttheirapplicationsacrossthe enterprise
• Maintaintheback-endITinfrastructureestateincludingservers,storage,UPS,andHyper-V environments
• PerformWindowsServerupgrades,rebuilds,andOSlifecyclemanagement
• Manageandmaintainsecuritypatchesacrossserverinfrastructureonadefinedcadence
• Migratedataacrosscloud,hybrid,andon-premisesenvironmentswithdocumentedrollback plans
• AdministerandmaintainWindowsServerDNSincludingzonehealth,recordlifecycle, replication,andconditionalforwardingconfigurations
• BuildandmaintainDRenvironments,runbooks,andfailover/failbackplans;participateinDR testingexercises
• WorkwithorwithoutformalSOPs;authorandmaintainrunbooksandtechnicaldocumentationasenvironmentsevolve
• Proactivelylearnanddocumentthe environmentsofcurrentandfutureacquiredcompanies to enable smooth integration
• Servesas a thought leader and architect new IDF/MDF configurations;identify opportunities to scale back or synergize infrastructure across the portfolio
• Be comfortable with on-call schedules and respond to critical alerts in a timely and effective manner

AI Systems Engineering & Governance

• Ownthedeployment,configuration,andongoingadministrationofenterpriseAIplatforms includingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini;manage platformaccounts,accesspolicies,andusagegovernance
• ArchitectandmanagetheenterpriseMCPserverinfrastructure:deployandmaintainMCPserver instances,configuretoolandconnectorregistries,manageconnectorlifecycle(onboarding, auditing,deprecation),andenforcedataflowandpermissionpoliciesacrossconnectors
• IntegrateAIplatformsandMCPserverswithenterpriseIAMcontrols(EntraID/AzureADSSO,ConditionalAccess, MFA) toensureAIsystemaccessisgovernedthroughstandardidentitypipelines
• ConductperiodicAIconnectorandplatformsecurityassessmentscoveringpermissionscopes, credentialexposure,data residency,outputvalidation,andpromptinjectionrisk;documentfindingsanddriveremediation
• ImplementandmaintainAIhardeningcontrols:APIgatewayratelimiting, WAFrulesforAIendpoints,sessionmanagement,killswitchprocedures,andanomalymonitoringviaSIEM
• PartnerwithbusinessunitstoevaluatenewAItoolsandvendorplatforms;perform pre-deploymentsecurity reviews and producearchitecturedocumentationbeforeproduction rollout
• MaintaincomprehensivedocumentationforallAI systems:architecture diagrams,security assessmentreports,connector governance policies,and operational runbooks
• StaycurrentwithdevelopmentsinenterpriseAIplatforms,MCPecosystemtooling,andAIsecuritybestpractices;translateemergingcapabilitiesintoactionableinfrastructure improvements
• Collaboratewithlegal,compliance,andsecurityteams toensureAIplatformusagealignswith HIPAA, data privacy obligations, and organizationalpolicy

Collaboration & Stakeholder Engagement

• Establishstrongworkingrelationshipswithcorporatebusinessunits,theOperationsteam,ITleadership,anddirectmanager
• Workcross-functionallytocoordinatelarge-scaleinfrastructureefforts,migrations,andAIplatformrollouts
• RepresentITinfrastructureandAIoperationsasasubject-matterexpertincross-teamplanning andarchitecturediscussions
• Communicateprojectstatus,risks,anddecisionsclearlytobothtechnicalandnon-technical stakeholders

Salary range: $120,000 - $145,000

Bonus Eligible:This position is also eligible for a discretionary company bonus, based upon business results.

Benefits: Employees in this position are eligible to participate in the company sponsored benefit programs, including the following within the first 12 months of employment:

• Health Insurance (medical, dental, and vision coverage)
• Paid Time Off (including vacation, sick leave, and flexible holiday days)
• 401(k) Retirement Plan with employer matching
• Life and Disability Insurance
• Employee Assistance Program (EAP)
• Commuter and/or Transit Benefits (if applicable)

Eligibility for specific benefits may vary based on job classification, schedule (e.g., full-time vs. part-time), work location and length of employment.