AI Security Architect

Why UKG:

At UKG, the work you do matters. The code you ship, the decisions you make, and the care you show a customer all add up to real impact. Today, tens of millions of workers start and end their days with our workforce operating platform. Helping people get paid, grow in their careers, and shape the future of their industries. That’s what we do.

We never stop learning. We never stop challenging the norm. We push for better, and we celebrate the wins along the way. Here, you’ll get flexibility that’s real, benefits you can count on, and a team that succeeds together. Because at UKG, your work matters—and so do you.

We are looking for a Principal AI Security Architect to join UKG's Application Security Architecture team. This is a high-impact, strategic position where you will serve as the leading voice on AI security. This is a hands-on leadership role, research-oriented architect who can help define how UKG evaluates, designs, builds, and governs secure AI-enabled systems. You will research emerging AI models, agentic systems, model integration patterns, AI-related security issues, and responsible AI practices, then translate that research into practical architecture patterns, secure design guidance, reusable harnesses, and team-ready tools.

You will bring a new AI-driven capability into the security review process, improving the speed, consistency, and depth of application security architecture reviews while ensuring appropriate controls for critical AI risks. You will work closely with security architects, application teams, product engineering, platform teams, and governance stakeholders to ensure AI is adopted securely, responsibly, and at enterprise scale.

• Provide architectural leadership and technical direction for secure AI adoption across application, platform, and product engineering teams, with a focus on practical security design, responsible AI, enterprise risk reduction, and scalable review processes.

• Research AI models, AI application architectures, agentic workflows, retrieval-augmented generation, model orchestration, prompt engineering, model context protocols, and emerging AI security issues to identify risks and actionable mitigations for UKG systems.

• Develop, document, and maintain reusable AI security architecture patterns, reference designs, control patterns, review checklists, and decision frameworks that can be consistently applied across multi-tenant SaaS and cloud environments.

• Design and build reusable security harnesses, prototypes, automation, and internal tools that help the security team review AI-enabled applications faster, validate control effectiveness, identify design gaps, and improve review quality.

• Integrate AI capabilities into the application security architecture review process, including opportunities to use AI-assisted analysis, secure design generation, threat modeling support, control mapping, code and configuration review, and evidence summarization.

• Evaluate AI development tools and coding assistants such as Git Hub Copilot, Claude Code, OpenAI Codex, and similar platforms, and define secure usage patterns, guardrails, and review practices for enterprise engineering teams.

• Partner with internal security, engineering, product, privacy, legal, compliance, and governance teams to align AI security architecture with business requirements, secure SDLC expectations, responsible AI principles, and customer trust obligations.

• Lead threat modeling and security design reviews for AI-enabled features, machine learning systems, data pipelines, model integrations, plugins, agents, vector databases, prompt chains, and third-party AI services.

• Apply and interpret relevant AI and security standards, frameworks, and risk models, including OWASP Top 10 for LLM Applications, OWASP Machine Learning Security Top 10, MITRE ATLAS, NIST AI RMF, secure SDLC practices, and other applicable industry guidance.

• Define security requirements for data protection, identity and access management, authorization, auditability, model input and output handling, prompt injection resistance, jailbreak resilience, sensitive data exposure prevention, model…