AI Systems Engineer

WebMD is the most recognized and trusted brand of health information and the leading provider of health information services, serving consumers, physicians, healthcare professionals, employers and health plans through our public and private online portals and WebMD the Magazine. The WebMD Health Network includes WebMD, Medscape, MedicineNet, eMedicine, RxList, theheart.org and Medscape Education. Our consumer portals and mobile health applications provide engaging, relevant and credible health and wellness information, personalized health assessment tools and access to online communities. WebMD is an Equal Opportunity/Affirmative Action employer and does not discriminate on the basis of race, ancestry, color, religion, sex, gender, age, marital status, sexual orientation, gender identity, national origin, medical condition, disability, veterans status, or any other basis protected by law. PositionOverview TheAI&SystemsEngineerisahybridinfrastructureandAIoperationsroleresponsibleformanaging thefullenterpriseITstackwhilealsoarchitecting,deploying,securing,andgoverningAIsystemsacross theorganization.ThisroleservesastheprimarytechnicalownerforAIplatformintegrations—including largelanguagemodels,MCPservers,andconnectorecosystems—alongsidetraditionalsystemsadministrationresponsibilitiescoveringWindowsServer,cloudplatforms,networkinfrastructure,andenterprise security.Theidealcandidatebridgesdeepinfrastructureexpertisewithhands-onAIengineering,ensuringAIsystemsaredeployedwith rigor, properlyhardened,andtightlyintegratedwithexistingenterpriseidentityandsecuritycontrols. PositionRequirements: Infrastructure&SystemsAdministration Experienceacrossthecompleteinfrastructurestack:network, security,storage,hardware,andOSlayer ExpertisewithWindowsServeradministration,configuration,upgrades,andlifecycle management DeepexpertiseinPowerShellscriptingforautomation,provisioning,reporting,andsystemsmanagement ExpertiseinDNSandDHCPadministration,includingWindowsServerDNSroles,zone management,conditionalforwarding,split-brainDNS,andDNSSEC ExperiencewithenterprisebackuptoolsincludingNetApp;buildingDRenvironmentsand failoverplans Proficiencywithvirtualizationplatforms:VMwareand/orHyper-V Experiencemanagingandmaintainingsecuritypatchesacrossserverandapplicationestates Experiencemigratingdataacrosscloud,hybrid,andon-premisesenvironments Abilitytoplan,organize,anddocumentcomplexsystemmaintenanceactivities;configure systemsconsistentwithinstitutionalpoliciesandprocedures Comfortablewithon-callschedulesandresponsetocriticalalertsinatimelymanner Cloud&ProductivityPlatforms ExperiencewithGoogle Workspace administration(userlifecycle,OUmanagement,GAMscripting) ExperiencewithGoogleCloudPlatform(GCP)infrastructureandservices ExperiencewithMicrosoft Office 365administrationincludinglicensing,ExchangeOnline,andcompliance ExperiencewithMicrosoftAzureincludingEntraID(formerlyAzureAD),ConditionalAccess,PIM,andAzureresourcemanagement FamiliaritywithsettingupandconfiguringapplicationswithAzureSSOorGoogleSSO(SAML,OIDC,OAuth2.0) AISystemsEngineering&Operations Hands-onexperiencedeploying,configuring,andadministeringlargelanguagemodel(LLM) platformsincludingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini acrossenterpriseenvironments ExperiencearchitectingandadministeringMCP(ModelContextProtocol)serverinfrastructure: deployingMCPserverinstances,configuringtoolregistries,managingconnectorecosystems (Airtable,Atlassian,GoogleDrive,Gmail,andothers),andintegratingMCPserverswith enterpriseidentityandaccesscontrols AbilitytodesignandenforceAIconnectorgovernancepolicies:scopemanagement,permission auditing,credentiallifecycle,andconnectoraccessreviews ExperienceperformingAIplatformsecurityassessmentscoveringpermissionscopes,data flows,outputvalidationpipelines,promptinjectiondefenses,andHITL(Human-in-the-Loop) controls FamiliaritywithAIhardeningprinciples:modelaccesscontrols,ratelimiting,WAFintegration,APIgatewayconfiguration,sessioncontrols,andkillswitchhierarchiesforAIsystems ExperienceconfiguringandmonitoringSIEMdetectionrulesforAIplatformactivityand anomaly detection UnderstandingofresponsibleAIdeploymentincludingdataresidencyrequirements, privacy-by-design, auditlogging,andregulatoryalignment(HIPAA,GDPRasapplicable) AbilitytoevaluatenewAIToolsandplatformsagainstenterprisesecuritystandardspriortodeployment ExperienceauthoringAISystemsdocumentation:architecturediagrams,runbooks,securityassessments,andgovernancepolicies Security&Compliance Knowledgeofapplicabledataprivacypractices,laws,andregulations(HIPAA,SOC2,GDPRfundamentals) Experiencewithidentityandaccessmanagement(IAM)tooling:EntraID,Active Directory,SAML/OIDCfederation,MFAenforcement,andprivilegedaccessmanagement Familiaritywithnetworksecurityconceptsincludingfirewall policy,VPNadministration,WAFconfiguration,andzero-trustnetworkaccessmodels ExperiencewithendpointmanagementusingMicrosoftIntuneorcomparableMDMsolutions Certifications&Nice-to-Have CertificationsinVMware,Hyper-V, MCSE,MCSA,orAWS/AzureSolutionsArchitectaredesirable CertificationsorcourseworkinAI/MLplatforms,promptengineering,orresponsibleAIareaplus Experiencewithinfrastructure-as-codetooling(Terraform,Bicep,orcomparable)is advantageous FamiliaritywithSIEMplatforms(MicrosoftSentinel,Splunk,orsimilar)forsecuritymonitoring ExperiencewithacquisitionITintegration:userprovisioning,mailboxmigrations,SSOfederation, anddirectoryconsolidation Roles&Responsibilities InfrastructureOperations Providetechnicalsupporttocorporatebusinessunitsandsupporttheirapplicationsacrossthe enterprise Maintaintheback-endITinfrastructureestateincludingservers,storage,UPS,andHyper-V environments PerformWindowsServerupgrades,rebuilds,andOSlifecyclemanagement Manageandmaintainsecuritypatchesacrossserverinfrastructureonadefinedcadence Migratedataacrosscloud,hybrid,andon-premisesenvironmentswithdocumentedrollback plans AdministerandmaintainWindowsServerDNSincludingzonehealth,recordlifecycle, replication,andconditionalforwardingconfigurations BuildandmaintainDRenvironments,runbooks,andfailover/failbackplans;participateinDR testingexercises WorkwithorwithoutformalSOPs;authorandmaintainrunbooksandtechnicaldocumentationasenvironmentsevolve Proactivelylearnanddocumenttheenvironmentsofcurrentandfutureacquiredcompanies toenablesmoothintegration ServeasathoughtleaderandarchitectnewIDF/MDFconfigurations;identifyopportunitiestoscalebackor synergizeinfrastructureacrosstheportfolio Becomfortablewithon-callschedulesandrespondtocriticalalertsina timelyandeffectiven manner AISystemsEngineering&Governance Ownthedeployment,configuration,andongoingadministrationofenterpriseAIplatforms includingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini;manage platformaccounts,accesspolicies,andusagegovernance Architectandmanage theenterpriseMCPserverinfrastructure:deployandmaintainMCPserver instances,configuretoolandconnectorregistries,manageconnectorlifecycle(onboarding, auditing,deprecation),andenforcedataflowandpermissionpoliciesacrossconnectors IntegrateAIplatformsandMCPserverswithenterpriseIAMcontrols(EntraID/AzureADSSO,ConditionalAccess, MFA) toensureAIsystemaccessisgovernedthroughstandardidentitypipelines ConductperiodicAIconnectorandplatformsecurityassessmentscoveringpermissionscopes, credentialexposure,data residency,outputvalidation,andpromptinjectionrisk;documentfindingsanddriveremediation ImplementandmaintainAIhardeningcontrols:APIgatewayratelimiting, WAFrulesforAIendpoints,sessionmanagement,killswitchprocedures,andanomalymonitoringviaSIEM PartnerwithbusinessunitstoevaluatenewAItoolsandvendorplatforms;perform pre-deploymentsecurityreviews and producearchitecturedocumentationbefore production rollout MaintaincomprehensivedocumentationforallAISystems:architecturediagrams,securityassessmentreports,connectorgovernancepolicies, andoperationalrunbooks StaycurrentwithdevelopmentsinenterpriseAIplatforms, MCPecosystemtooling, andAIsecuritybestpractices;translate emergingcapabilitiesintoactionableinfrastructureimprovements Collaboratewithlegal,compliance,andsecurityteams toensureAIplatformusagealignswith HIPAA, data privacyobligations, andorganizationalpolicy Collaboration&StakeholderEngagement Establishstrongworkingrelationshipswithcorporatebusinessunits,theOperationsteam,ITleadership,anddirectmanager Workcross-functionallytocoordinatelarge-scaleinfrastructureefforts,migrations,andAIplatformrollouts RepresentITinfrastructureandAIoperationsasasubject-matterexpertincross-teamplanning andarchitecturediscussions Communicateprojectstatus,risks,anddecisionsclearlytobothtechnicalandnon-technical stakeholders Salary range: $120,000 - $145,000 Bonus Eligible: This position is also eligible for a discretionary company bonus, based upon business results. Benefits: Employees in this position are eligible to participate in the company sponsored benefit programs, including the following within the first 12 months of employment: Health Insurance (medical, dental, and vision coverage) Paid Time Off (including vacation, sick leave, and flexible holiday days) 401(k) Retirement Plan with employer matching Life and Disability Insurance Employee Assistance Program (EAP) Commuter and/or Transit Benefits (if applicable) Eligibility for specific benefits may vary based on job classification, schedule (e.g., full-time vs. part-time), work location and length of employment. #J-18808-Ljbffr WebMD LLC