AI Systems Engineer

WebMD LLC; Yardley (Bucks County); On-site; USD 120,000 - 145,000; Full time

Benefits offered by this job

Health Insurance

401(k) Retirement Plan

Life and Disability Insurance

Employee Assistance Program (EAP)

Commuter/Transit Benefits

Paid Time Off

Job summary

WebMD LLC seeks an experienced Infrastructure & Systems Engineer to manage the full enterprise IT stack and architect AI systems across the organization. You will deploy, secure, and govern AI platforms, integrations with MCP servers, and traditional infrastructure such as Windows Server, cloud platforms, and identity controls.

The ideal candidate bridges deep infrastructure expertise with hands-on AI engineering to ensure rigorous deployment, strong hardening, and tight integration with

Qualifications

• Experience across the complete infrastructure stack: network, security, storage, hardware, and OS layers.
• Expertise with Windows Server administration, configuration, upgrades, and lifecycle management.
• Deep expertise in PowerShell scripting for automation, provisioning, reporting, and systems management.
• Expertise in DNS and DHCP administration, including Windows Server DNS roles, zone management, conditional forwarding, split-brain DNS, and DNSSEC.
• Experience with enterprise back- ups including NetApp; building DR environments and failover plans.
• Proficiency with virtualization platforms: VMware and/or Hyper-V.
• Experience managing and maintaining security patches across server and application estates.
• Experience migrating data across cloud, hybrid, and on-premises environments.
• Ability to plan, organize, and document complex system maintenance activities; configure systems consistent within institutional policies and procedures.
• Comfortable with on-call schedules and response to critical alerts in a timely manner.

Responsibilities

• Provide technical support to corporate business units and support their applications across the enterprise.
• Maintain the back-end IT infrastructure estate including servers, storage, UPS, and Hyper-V environments.
• Perform Windows Server upgrades, rebuilds, and OS lifecycle management.
• Manage and maintain security patches across server infrastructure on a defined cadence.
• Migrate data across cloud, hybrid, and on-premises environments with documented rollback plans.
• Administer and maintain Windows Server DNS including zone health, record lifecycle, replication, and conditional forwarding configurations.
• Build and maintain DR environments, runbooks, and failover/failback plans; participate in DR testing exercises.
• Work with SOPs or author/runbooks as environments evolve; proactively learn and document acquired company environments.
• Own the deployment, configuration, and ongoing administration of enterprise AI platforms including Anthropic Claude and Google Gemini; manage platform accounts, access policies, and usage governance.
• Architect and manage MCP server infrastructure: deploy MCP server instances, configure tool registries, manage connector lifecycle, and enforce data flow policies across connectors.

Skills

Infrastructure expertise

Automation scripting

Incident response

Documentation & runbooks

Tools

Windows Server

DNS/DHCP

NetApp

VMware

Hyper-V

SIEM

MCP server infra

MCP Registries & connectors

Azure AD / EntraID

Azure SSO / Google SSO

GCP

Office 365

Job description

WebMD is the most recognized and trusted brand of health information and the leading provider of health information services, serving consumers, physicians, healthcare professionals, employers and health plans through our public and private online portals and WebMD the Magazine. The WebMD Health Network includes WebMD, Medscape, MedicineNet, eMedicine, RxList, theheart.org and Medscape Education. Our consumer portals and mobile health applications provide engaging, relevant and credible health and wellness information, personalized health assessment tools and access to online communities.WebMD is an Equal Opportunity/Affirmative Action employer and does not discriminate on the basis of race, ancestry, color, religion, sex, gender, age, marital status, sexual orientation, gender identity, national origin, medical condition, disability, veterans status, or any other basis protected by law.

PositionOverview

TheAI&SystemsEngineerisahybridinfrastructureandAIoperationsroleresponsibleformanaging thefullenterpriseITstackwhilealsoarchitecting,deploying,securing,andgoverningAIsystemsacross theorganization.ThisroleservesastheprimarytechnicalownerforAIplatformintegrations—including largelanguagemodels,MCPservers,andconnectorecosystems—alongsidetraditionalsystemsadministrationresponsibilitiescoveringWindowsServer,cloudplatforms,networkinfrastructure,andenterprise security.Theidealcandidatebridgesdeepinfrastructureexpertisewithhands-onAIengineering,ensuringAIsystemsaredeployedwith rigor, properlyhardened,andtightlyintegratedwithexistingenterpriseidentityandsecuritycontrols.

PositionRequirements:

Infrastructure&SystemsAdministration

• Experienceacrossthecompleteinfrastructurestack:network, security,storage,hardware,andOSlayer
• ExpertisewithWindowsServeradministration,configuration,upgrades,andlifecycle management
• DeepexpertiseinPowerShellscriptingforautomation,provisioning,reporting,andsystemsmanagement
• ExpertiseinDNSandDHCPadministration,includingWindowsServerDNSroles,zone management,conditionalforwarding,split-brainDNS,andDNSSEC
• ExperiencewithenterprisebackuptoolsincludingNetApp;buildingDRenvironmentsand failoverplans
• Proficiencywithvirtualizationplatforms:VMwareand/orHyper-V
• Experiencemanagingandmaintainingsecuritypatchesacrossserverandapplicationestates
• Experiencemigratingdataacrosscloud,hybrid,andon-premisesenvironments
• Abilitytoplan,organize,anddocumentcomplexsystemmaintenanceactivities;configure systemsconsistentwithinstitutionalpoliciesandprocedures
• Comfortablewithon-callschedulesandresponsetocriticalalertsinatimelymanner

Cloud&ProductivityPlatforms

• ExperiencewithGoogle Workspace administration(userlifecycle,OUmanagement,GAMscripting)
• ExperiencewithGoogleCloudPlatform(GCP)infrastructureandservices
• ExperiencewithMicrosoft Office 365administrationincludinglicensing,ExchangeOnline,andcompliance
• ExperiencewithMicrosoftAzureincludingEntraID(formerlyAzureAD),ConditionalAccess,PIM,andAzureresourcemanagement
• FamiliaritywithsettingupandconfiguringapplicationswithAzureSSOorGoogleSSO(SAML,OIDC,OAuth2.0)

AISystemsEngineering&Operations

• Hands-onexperiencedeploying,configuring,andadministeringlargelanguagemodel(LLM) platformsincludingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini acrossenterpriseenvironments
• ExperiencearchitectingandadministeringMCP(ModelContextProtocol)serverinfrastructure: deployingMCPserverinstances,configuringtoolregistries,managingconnectorecosystems (Airtable,Atlassian,GoogleDrive,Gmail,andothers),andintegratingMCPserverswith enterpriseidentityandaccesscontrols
• AbilitytodesignandenforceAIconnectorgovernancepolicies:scopemanagement,permission auditing,credentiallifecycle,andconnectoraccessreviews
• ExperienceperformingAIplatformsecurityassessmentscoveringpermissionscopes,data flows,outputvalidationpipelines,promptinjectiondefenses,andHITL(Human-in-the-Loop) controls
• FamiliaritywithAIhardeningprinciples:modelaccesscontrols,ratelimiting,WAFintegration,APIgatewayconfiguration,sessioncontrols,andkillswitchhierarchiesforAIsystems
• ExperienceconfiguringandmonitoringSIEMdetectionrulesforAIplatformactivityand anomaly detection
• UnderstandingofresponsibleAIdeploymentincludingdataresidencyrequirements, privacy-by-design, auditlogging,andregulatoryalignment(HIPAA,GDPRasapplicable)
• AbilitytoevaluatenewAIToolsandplatformsagainstenterprisesecuritystandardspriortodeployment
• ExperienceauthoringAISystemsdocumentation:architecturediagrams,runbooks,securityassessments,andgovernancepolicies

Security&Compliance

• Knowledgeofapplicabledataprivacypractices,laws,andregulations(HIPAA,SOC2,GDPRfundamentals)
• Experiencewithidentityandaccessmanagement(IAM)tooling:EntraID,Active Directory,SAML/OIDCfederation,MFAenforcement,andprivilegedaccessmanagement
• Familiaritywithnetworksecurityconceptsincludingfirewall policy,VPNadministration,WAFconfiguration,andzero-trustnetworkaccessmodels
• ExperiencewithendpointmanagementusingMicrosoftIntuneorcomparableMDMsolutions

Certifications&Nice-to-Have

• CertificationsinVMware,Hyper-V, MCSE,MCSA,orAWS/AzureSolutionsArchitectaredesirable
• CertificationsorcourseworkinAI/MLplatforms,promptengineering,orresponsibleAIareaplus
• Experiencewithinfrastructure-as-codetooling(Terraform,Bicep,orcomparable)is advantageous
• FamiliaritywithSIEMplatforms(MicrosoftSentinel,Splunk,orsimilar)forsecuritymonitoring
• ExperiencewithacquisitionITintegration:userprovisioning,mailboxmigrations,SSOfederation, anddirectoryconsolidation

Roles&Responsibilities

InfrastructureOperations

• Providetechnicalsupporttocorporatebusinessunitsandsupporttheirapplicationsacrossthe enterprise
• Maintaintheback-endITinfrastructureestateincludingservers,storage,UPS,andHyper-V environments
• PerformWindowsServerupgrades,rebuilds,andOSlifecyclemanagement
• Manageandmaintainsecuritypatchesacrossserverinfrastructureonadefinedcadence
• Migratedataacrosscloud,hybrid,andon-premisesenvironmentswithdocumentedrollback plans
• AdministerandmaintainWindowsServerDNSincludingzonehealth,recordlifecycle, replication,andconditionalforwardingconfigurations
• BuildandmaintainDRenvironments,runbooks,andfailover/failbackplans;participateinDR testingexercises
• WorkwithorwithoutformalSOPs;authorandmaintainrunbooksandtechnicaldocumentationasenvironmentsevolve
• Proactivelylearnanddocumenttheenvironmentsofcurrentandfutureacquiredcompanies toenablesmoothintegration
• ServeasathoughtleaderandarchitectnewIDF/MDFconfigurations;identifyopportunitiestoscalebackor synergizeinfrastructureacrosstheportfolio
• Becomfortablewithon-callschedulesandrespondtocriticalalertsina timelyandeffectiven manner

AISystemsEngineering&Governance

• Ownthedeployment,configuration,andongoingadministrationofenterpriseAIplatforms includingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini;manage platformaccounts,accesspolicies,andusagegovernance
• Architectandmanage theenterpriseMCPserverinfrastructure:deployandmaintainMCPserver instances,configuretoolandconnectorregistries,manageconnectorlifecycle(onboarding, auditing,deprecation),andenforcedataflowandpermissionpoliciesacrossconnectors
• IntegrateAIplatformsandMCPserverswithenterpriseIAMcontrols(EntraID/AzureADSSO,ConditionalAccess, MFA) toensureAIsystemaccessisgovernedthroughstandardidentitypipelines
• ConductperiodicAIconnectorandplatformsecurityassessmentscoveringpermissionscopes, credentialexposure,data residency,outputvalidation,andpromptinjectionrisk;documentfindingsanddriveremediation
• ImplementandmaintainAIhardeningcontrols:APIgatewayratelimiting, WAFrulesforAIendpoints,sessionmanagement,killswitchprocedures,andanomalymonitoringviaSIEM
• PartnerwithbusinessunitstoevaluatenewAItoolsandvendorplatforms;perform pre-deploymentsecurityreviews and producearchitecturedocumentationbefore production rollout
• MaintaincomprehensivedocumentationforallAISystems:architecturediagrams,securityassessmentreports,connectorgovernancepolicies, andoperationalrunbooks
• StaycurrentwithdevelopmentsinenterpriseAIplatforms, MCPecosystemtooling, andAIsecuritybestpractices;translate emergingcapabilitiesintoactionableinfrastructureimprovements
• Collaboratewithlegal,compliance,andsecurityteams toensureAIplatformusagealignswith HIPAA, data privacyobligations, andorganizationalpolicy

Collaboration&StakeholderEngagement

• Establishstrongworkingrelationshipswithcorporatebusinessunits,theOperationsteam,ITleadership,anddirectmanager
• Workcross-functionallytocoordinatelarge-scaleinfrastructureefforts,migrations,andAIplatformrollouts
• RepresentITinfrastructureandAIoperationsasasubject-matterexpertincross-teamplanning andarchitecturediscussions
• Communicateprojectstatus,risks,anddecisionsclearlytobothtechnicalandnon-technical stakeholders

Salary range: $120,000 - $145,000

Bonus Eligible:This position is also eligible for a discretionary company bonus, based upon business results.

Benefits: Employees in this position are eligible to participate in the company sponsored benefit programs, including the following within the first 12 months of employment:

• Health Insurance (medical, dental, and vision coverage)
• Paid Time Off (including vacation, sick leave, and flexible holiday days)
• 401(k) Retirement Plan with employer matching
• Life and Disability Insurance
• Employee Assistance Program (EAP)
• Commuter and/or Transit Benefits (if applicable)

Eligibility for specific benefits may vary based on job classification, schedule (e.g., full-time vs. part-time), work location and length of employment.