Azure AI Platform Security Engineer

Kai; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Kai is seeking an AI Platform Security Engineer to secure the Azure infrastructure powering its AI-native cybersecurity product. You will own cloud security, data/AI platform protections, and the internal developer platform.

You will collaborate with Platform Engineering, DevOps, Data Engineering, and MLOps to design, implement, and operate secure systems at scale. Expect a technical, security‑driven environment with impactful ownership.

Qualifications

• 6+ years of experience in cloud security, infrastructure security, or platform security engineering.
• At least 3 years working deeply in Microsoft Azure.
• Expert-level knowledge of Azure security services: Entra ID, Key Vault, Azure Firewall, Azure Policy, Private Networking.
• Strong hands-on experience with Kubernetes security and AKS platform operations, including admission controllers.
• Proficiency with IaC tooling (Terraform and/or Bicep) and IaC security scanning.
• Strong scripting skills in Python, Bash, or PowerShell for automation.
• Experience with cloud identity architecture (Entra ID, managed identities, OAuth 2.0/OIDC, PIM, Conditional Access).
• Knowledge of network security concepts: firewalls, NSGs, DNS security, private networking, and ZTNA.

Responsibilities

• Own end-to-end security infrastructure architecture of Azure environment, including landing zone design and network topology.
• Enforce guardrails using Azure Policy, CSPM, and IaC security scanning.
• Manage Azure network security model: hub-and-spoke, NSG, Azure Firewall, Private Endpoints, DDoS controls.
• Lead cloud security posture reviews and Secure Score improvement roadmap.
• Harden Azure landing zones; ensure new workloads are provisioned securely.

Skills

Ownership mindset

Azure security

Kubernetes security

Data/AI security

Terraform/Bicep

Scripting (Python/Bash/PowerShell)

Identity & access security (Entra ID,P

Tools

Terraform

Bicep

Kubernetes

Notary/Cosign

Azure CLI

Job description

Kai is seeking an AI Platform Security Engineer to secure the Azure infrastructure powering its AI-native cybersecurity product. You will own cloud security, data/AI platform protections, and the internal developer platform.

You will collaborate with Platform Engineering, DevOps, Data Engineering, and MLOps to design, implement, and operate secure systems at scale. Expect a technical, security‑driven environment with impactful ownership.