AI - Cloud Security Engineer

Duties

• Design and operate the Azure cloud environment for the AI platform: subscriptions, networking, private endpoints and landing zones.
• Implement identity and access for people, applications and AI agents, including agent identities, least-privilege permissions and on-behalf-of access to source systems.
• Build security controls into the platform: secrets management, encryption, data loss prevention, sensitive-data handling and an agent kill-switch.
• Implement AI guardrails and policy enforcement in partnership with Compliance, Risk and Information Security.
• Monitor for threats and misconfigurations, respond to security events and support audits and client due diligence.
• Manage cloud cost and capacity for AI workloads.

Requirements

• 5+ years in cloud engineering or cloud security, with strong Azure experience.
• Hands-on knowledge of Microsoft Entra , Key Vault, Azure networking, Defender for Cloud and Azure Policy.
• Experience securing applications that handle confidential financial or personal data.
• Working knowledge of security frameworks and regulatory expectations in financial services (for example, SOC 1/SOC 2 and data-privacy requirements).
• Infrastructure as code and scripting experience.

Nice to have

• Experience securing LLM or AI applications, including prompt-injection and data-leakage risks.
• Microsoft security or Azure certifications (for example, AZ-500, SC-100) or CISSP.
• Background in fund administration, asset management or banking.

Our technology

Microsoft Azure (AKS, API Management, Service Bus, Key Vault, Entra , Azure AI services), Snowflake, MCP servers, Python and .NET, Azure Dev Ops, and leading large language models.