AI Systems Engineer

Description

Position at WebMD

WebMD is the most recognized and trusted brand of health information and the leading provider of health information services, serving consumers, physicians, healthcare professionals, employers and health plans through our public and private online portals and WebMD the Magazine. The WebMD Health Network includes WebMD, Medscape, MedicineNet, eMedicine, RxList, theheart.org and Medscape Education. Our consumer portals and mobile health applications provide engaging, relevant and credible health and wellness information, personalized health assessment tools and access to online communities.

WebMD is an Equal Opportunity/Affirmative Action employer and does not discriminate on the basis of race, ancestry, color, religion, sex, gender, age, marital status, sexual orientation, gender identity, national origin, medical condition, disability, veterans status, or any other basis protected by law.

PositionOverview

TheAI&SystemsEngineerisahybridinfrastructureandAIoperationsroleresponsibleformanaging thefullenterpriseITstackwhilealsoarchitecting,deploying,securing,andgoverningAIsystemsacross theorganization.ThisroleservesastheprimarytechnicalownerforAIplatformintegrations—including largelanguagemodels,MCPservers,andconnectorecosystems—alongsidetraditionalsystemsadministrationresponsibilitiescoveringWindowsServer,cloudplatforms,networkinfrastructure,andenterprise security.Theidealcandidatebridgesdeepinfrastructureexpertisewithhands-onAIengineering,ensuringAIsystemsaredeployedwith rigor, properlyhardened,andtightlyintegratedwithexistingenterpriseidentityandsecuritycontrols.

PositionRequirements: 

Infrastructure&SystemsAdministration 

• Experienceacrossthecompleteinfrastructurestack:network, security,storage,hardware,andOSlayer
• ExpertisewithWindowsServeradministration,configuration,upgrades,andlifecycle management
• DeepexpertiseinPowerShellscriptingforautomation,provisioning,reporting,andsystemsmanagement
• ExpertiseinDNSandDHCPadministration,includingWindowsServerDNSroles,zone management,conditionalforwarding,split-brainDNS,andDNSSEC
• ExperiencewithenterprisebackuptoolsincludingNetApp;buildingDRenvironmentsand failoverplans
• Proficiencywithvirtualizationplatforms:VMwareand/orHyper-V
• Experiencemanagingandmaintainingsecuritypatchesacrossserverandapplicationestates
• Experiencemigratingdataacrosscloud,hybrid,andon-premisesenvironments
• Abilitytoplan,organize,anddocumentcomplexsystemmaintenanceactivities;configure systemsconsistentwithinstitutionalpoliciesandprocedures
• Comfortablewithon-callschedulesandresponsetocriticalalertsinatimelymanner

Cloud&ProductivityPlatforms 

• ExperiencewithGoogleWorkspace administration(userlifecycle,OUmanagement,GAMscripting)
• ExperiencewithGoogleCloudPlatform(GCP)infrastructureandservices
• ExperiencewithMicrosoft Office 365administrationincludinglicensing,ExchangeOnline,andcompliance
• ExperiencewithMicrosoftAzureincludingEntraID(formerlyAzureAD),ConditionalAccess,PIM,andAzureresourcemanagement
• FamiliaritywithsettingupandconfiguringapplicationswithAzureSSOorGoogleSSO(SAML,OIDC,OAuth2.0) 

AISystemsEngineering&Operations 

• Hands-onexperiencedeploying,configuring,andadministeringlargelanguagemodel(LLM) platformsincludingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini acrossenterpriseenvironments
• ExperiencearchitectingandadministeringMCP(ModelContextProtocol)serverinfrastructure: deployingMCPserverinstances,configuringtoolregistries,managingconnectorecosystems (Airtable,Atlassian,GoogleDrive,Gmail,andothers),andintegratingMCPserverswith enterpriseidentityandaccesscontrols
• AbilitytodesignandenforceAIconnectorgovernancepolicies:scopemanagement,permission auditing,credentiallifecycle,andconnectoraccessreviews
• ExperienceperformingAIplatformsecurityassessmentscoveringpermissionscopes,data flows,outputvalidationpipelines,promptinjectiondefenses,andHITL(Human-in-the-Loop) controls
• FamiliaritywithAIhardeningprinciples:modelaccesscontrols,ratelimiting,WAFintegration,APIgatewayconfiguration,sessioncontrols,andkillswitchhierarchiesforAIsystems
• ExperienceconfiguringandmonitoringSIEMdetectionrulesforAIplatformactivityandanomaly detection
• UnderstandingofresponsibleAIdeploymentincludingdataresidencyrequirements, privacy-by-design,auditlogging,andregulatoryalignment(HIPAA,GDPRasapplicable)
• AbilitytoevaluatenewAItoolsandplatformsagainstenterprisesecuritystandardspriortoproductiondeployment
• ExperienceauthoringAIsystemsdocumentation:architecturediagrams,runbooks,security assessments,andgovernancepolicies

Security&Compliance 

• Knowledgeofapplicabledataprivacypractices,laws,andregulations(HIPAA,SOC2,GDPRfundamentals)
• Experiencewithidentityandaccessmanagement(IAM)tooling:EntraID,Active Directory,SAML/OIDCfederation,MFAenforcement,andprivilegedaccessmanagement
• Familiaritywithnetworksecurityconceptsincludingfirewallpolicy,VPNadministration,WAFconfiguration,andzero-trustnetworkaccessmodels
• ExperiencewithendpointmanagementusingMicrosoftIntuneorcomparableMDMsolutions

Certifications&Nice-to-Have 

• CertificationsinVMware,Hyper-V, MCSE,MCSA,orAWS/AzureSolutionsArchitectaredesirable
• CertificationsorcourseworkinAI/MLplatforms,promptengineering,orresponsibleAIareaplus
• Experiencewithinfrastructure-as-codetooling(Terraform,Bicep,orcomparable)is advantageous
• FamiliaritywithSIEMplatforms(MicrosoftSentinel,Splunk,orsimilar)forsecuritymonitoring
• ExperiencewithacquisitionITintegration:userprovisioning,mailboxmigrations,SSOfederation, anddirectoryconsolidation

Roles&Responsibilities 

InfrastructureOperations 

•  Providetechnicalsupporttocorporatebusinessunitsandsupporttheirapplicationsacrossthe enterprise
• Maintaintheback-endITinfrastructureestateincludingservers,storage,UPS,andHyper-V environments
• PerformWindowsServerupgrades,rebuilds,andOSlifecyclemanagement
• Manageandmaintainsecuritypatchesacrossserverinfrastructureonadefinedcadence
• Migratedataacrosscloud,hybrid,andon-premisesenvironmentswithdocumentedrollback plans
• AdministerandmaintainWindowsServerDNSincludingzonehealth,recordlifecycle, replication,andconditionalforwardingconfigurations
• BuildandmaintainDRenvironments,runbooks,andfailover/failbackplans;participateinDR testingexercises
• WorkwithorwithoutformalSOPs;authorandmaintainrunbooksandtechnicaldocumentationasenvironmentsevolve
• Proactivelylearnanddocumenttheenvironmentsofcurrentandfutureacquiredcompaniestoenablesmoothintegration
• ServeasathoughtleaderandarchitectnewIDF/MDFconfigurations;identifyopportunitiestoscalebackorsynergizeinfrastructureacrosstheportfolio
• Becomfortablewithon-callschedulesandrespondtocriticalalertsinatimelyand effectivemanner

AISystemsEngineering&Governance 

• Ownthedeployment,configuration,andongoingadministrationofenterpriseAIplatforms includingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini;manage platformaccounts,accesspolicies,andusagegovernance
• ArchitectandmanagetheenterpriseMCPserverinfrastructure:deployandmaintainMCPserver instances,configuretoolandconnectorregistries,manageconnectorlifecycle(onboarding, auditing,deprecation),andenforcedataflowandpermissionpoliciesacrossconnectors
• IntegrateAIplatformsandMCPserverswithenterpriseIAMcontrols(EntraID/AzureADSSO,ConditionalAccess, MFA) toensureAIsystemaccessisgovernedthroughstandardidentitypipelines
• ConductperiodicAIconnectorandplatformsecurityassessmentscoveringpermissionscopes, credentialexposure,dataresidency,outputvalidation,andpromptinjectionrisk;documentfindingsanddriveremediation
• ImplementandmaintainAIhardeningcontrols:APIgatewayratelimiting, WAFrulesforAIendpoints,sessionmanagement,killswitchprocedures,andanomalymonitoringviaSIEM
• PartnerwithbusinessunitstoevaluatenewAItoolsandvendorplatforms;perform pre-deploymentsecurityreviewsandproducearchitecturedocumentationbeforeproduction rollout
• MaintaincomprehensivedocumentationforallAIsystems:architecturediagrams,security assessmentreports,connectorgovernancepolicies,andoperationalrunbooks
• StaycurrentwithdevelopmentsinenterpriseAIplatforms,MCPecosystemtooling,andAIsecuritybestpractices;translateemergingcapabilitiesintoactionableinfrastructure improvements
• Collaboratewithlegal,compliance,andsecurityteamstoensureAIplatformusagealignswith HIPAA, dataprivacyobligations,andorganizationalpolicy

Collaboration&StakeholderEngagement 

• Establishstrongworkingrelationshipswithcorporatebusinessunits,theOperationsteam,ITleadership,anddirectmanager
• Workcross-functionallytocoordinatelarge-scaleinfrastructureefforts,migrations,andAIplatformrollouts
• RepresentITinfrastructureandAIoperationsasasubject-matterexpertincross-teamplanning andarchitecturediscussions
• Communicateprojectstatus,risks,anddecisionsclearlytobothtechnicalandnon-technical stakeholders

Salary range: $120,000 - $145,000

Bonus Eligible:  This position is also eligible for a discretionary company bonus, based upon business results.

Benefits: Employees in this position are eligible to participate in the company sponsored benefit programs, including the following within the first 12 months of employment:

• Health Insurance (medical, dental, and vision coverage)
• Paid Time Off (including vacation, sick leave, and flexible holiday days)
• 401(k) Retirement Plan with employer matching
• Life and Disability Insurance
• Employee Assistance Program (EAP)
• Commuter and/or Transit Benefits (if applicable)

Eligibility for specific benefits may vary based on job classification, schedule (e.g., full-time vs. part-time), work location and length of employment.