Security Architect - AI AppSec

Sovereign Care Services LLP; Chicago (IL); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

401(k)

Employee discounts

Opportunity for advancement

Flexible Work Environment

Competitive Compensation

Career Advancement Opportunities

Job summary

Sovereign Care Services LLP in Chicago, Illinois, is looking for a Security Architect/AI Security AppSec. The role involves evaluating and implementing security measures for AI technologies to ensure compliance and resilience. Responsibilities include assessing AI tools, designing secure architectures, and analyzing threats.

The ideal candidate should have over 5 years of experience in Cloud Security, particularly Azure, and relevant certifications. This position offers a flexible work environment and competitive compensation.

Qualifications

• 5+ years in Cloud Security/Architecture with a focus on Azure.
• Expert-level understanding of Microsoft Entra ID and Managed Identity.
• Deep familiarity with Model Context Protocol (MCP) for data isolation.

Responsibilities

• Evaluate new AI tools for security posture in regulated environments.
• Design secure architectural patterns for AI agent integration.
• Analyze AI-specific threats and architect mitigations.

Skills

Cloud Security/Architecture

Azure platform experience

Azure AI Services

Microsoft Entra ID

Zero Trust implementation

Infrastructure as Code

Familiarity with OWASP Top 10

Education

Certifications: Azure Security Engineer Associate, Azure AI Engineer Associate, CISSP/CCSP

Tools

Terraform

Bicep

Job description

Job Summary

We are currently seeking an experienced Security Architect/AI Security AppSec to join our team! As a Security Architect, you will focus on assisting with the strategic evaluation and secure implementation of our AI Agent Framework. As AI adoption accelerates across our investment and research teams, this role will be pivotal in ensuring our systems remain secure, resilient, and compliant. You will combine high‑level architectural oversight—specifically evaluating new and emerging AI technologies—with hands‑on engineering.

Reporting to the Director of Security in the Global Security organization, you will research security controls, validate emerging architectural patterns and define the governance standards for M365 Copilot Agents and autonomous agents built on Azure AI Foundry.

Benefits and Perks

• 401(k)
• Employee discounts
• Opportunity for advancement
• Flexible Work Environment
• Competitive Compensation
• Career Advancement Opportunities

Responsibilities

• Proactively evaluate new AI tools, frameworks, and LLM providers to assess their security posture and suitability for a highly regulated investment environment.
• Design and validate secure architectural patterns for AI agent integration within the organization’s ecosystem, ensuring data privacy and IP protection.
• Conduct deep‑dive analysis of AI specific threats (prompt injection, model inversion, data poisoning) and architect systemic mitigations.
• Evaluate the security capabilities of Azure AI Foundry, M365 Copilot Studio, and the Microsoft Graph API against the organization’s compliance standards.
• Assess Model Context Protocol (MCP) security best practices, designing isolation strategies for context management.
• Assist with evaluations of other technologies being evaluated by our Enterprise Architecture Review Board.

Qualifications

• 5+ years in Cloud Security/Architecture with deep hands‑on Azure platform experience.
• Hands‑on experience with Azure AI Services, Azure OpenAI, Azure AI Foundry (or similar platforms like AWS SageMaker).
• Expert‑level understanding of Microsoft Entra ID, Service Principals, and Managed Identity in a complex enterprise environment.
• Deep familiarity with Model Context Protocol (MCP) and its implications for data isolation and session security.
• Strong grasp of RAG (Retrieval‑Augmented Generation) patterns and vector database security.
• Zero Trust: Proven track record of implementing Zero Trust in financial services or cloud‑native environments.
• Experience with Infrastructure as Code (Terraform, Bicep) to codify security guardrails.
• Familiarity with the OWASP Top 10 for LLMs and AI‑specific vulnerability scanning.
• Certifications: Azure Security Engineer Associate, Azure AI Engineer Associate, or CISSP/CCSP.