About the RoleAssignment: Expected to range 8 - 12 months
MUST BE CURRENTLY AUTHORIZED TO WORK IN THE UNITED STATES. NO VISA OR IMMIGRATION SPONSORSHIP FOR THIS ROLE, NOW OR IN THE FUTURE. (e.g., H-1B, STEM OPT, TN, etc.)
We're seeking an
Information Security Lead Engineer - AI & Emerging Technology to work with our growing Information Security team and help embed security into our DevOps and cloud practices. This role will work together with DevOps, Cloud Infrastructure, and Application Engineering teams to design and implement secure, scalable cloud solutions across Azure and AWS environments.
The ideal candidate brings deep cloud expertise, a passion for automation, and hands-on experience building secure-by-design architectures. You will also help implement AI security controls and support our organization's broader AI adoption strategy.
The Information Security - AI & Emerging Technology is a full-time, contract role reporting to the Deputy Chief Information Security Officer. Benefits are not included in this contract position.
What you'll do- Partner with DevOps and engineering teams to integrate security throughout the CI/CD pipeline and Infrastructure as Code (IaC) deployments.
- Design, implement, and maintain Azure Policies and guardrails for continuous compliance and drift detection.
- Develop secure cloud configurations and architectures leveraging PaaS services across Azure (and, to a lesser extent, AWS).
- Key contributor to threat modeling and building defensible architecture
- Collaborate with architecture and infrastructure teams to define and implement AI-specific security controls.
- Monitor regulatory and industry developments and align cloud security practices with organizational policy and compliance goals.
- Support detection and response teams with insights into cloud and DevOps security events.
- Additional responsibilities as identified. This description is not designed to encompass a comprehensive listing of required activities, duties, or responsibilities.
What you'll bring - 5+ years of hands-on experience in cloud security engineering or a DevSecOps focused role.
- Strong working knowledge of Microsoft Azure, Azure Policy (Enterprise Policy as Code - EPAC), and related cloud governance tooling (e.g. AWS Config)
- Demonstrated proficiency in Infrastructure as Code (IaC) tools (Terraform, Bicep, ARM templates, etc.).
- Practical and demonstrated experience deploying and securing PaaS environments and cloud-native services in multi-tenant environments
- Solid understanding of cloud networking, identity management, zero trust principles, and federation.
- Familiarity with AWS cloud fundamentals and security features.
- Preferred qualifications:
- Experience developing or securing AI/ML workloads in cloud environments.
- Relevant certifications such as AZ-500 (Azure Security Engineer Associate), CCSP, SANS GCAD, or Terraform certifications.
- Knowledge of container security (Kubernetes, AKS, EKS) and shift-left security approaches.
- Experience with Defender for Cloud tools (Defender for Containers, Defender for DevOps, workload protections, etc.)
- Excellent collaboration and communication skills with the ability to convey complex information clearly to stakeholders; ability to translate security requirements into actionable DevOps practices.
- Excellent written and verbal communication skills in English, with the ability to convey complex
- Highly organized with excellent organizational skills with experience operating in time-sensitive, ambiguous environments, balancing competing priorities with sound judgment and discretion.
- Core working hours are generally 8:30 AM - 5:30 PM, Monday - Friday; willingness to work outside of normal U.S. business hours, and as unique projects/needs arise
- Must become familiar with, and promote and abide by, our Core Values as defined by the AlixPartners' Code of Conduct and foster an inclusive environment with people at all levels of an organization
