AI Security Architect

Who we are

Artmac Soft is a technology consulting and service-oriented IT company dedicated to providing innovative technology solutions and services to customers.

Job Description:

Job Title : AI Security Architect

Job Type : C2C / W2

Experience : 10-15 Years

Location : Houston, Texas (Remote)

Role Summary:

We are looking for a Hands-on security architecture role responsible for the security posture of Joule deployments - access control, data governance, and risk - working directly with the business and IT to clear use cases for POC and production.

Key Responsibilities :

• Define and implement security architecture for Joule deployments, including authentication, authorization, and role-based access
• Design role-based access controls, least-privilege access, segregation of duties (SoD), and privileged/emergency access processes for AI administrators, developers, business users, and service accounts
• Assess data sensitivity and enforce data governance controls for each Joule use case
• Define controls to prevent unauthorized data exposure through prompts, AI agents, and integrations, and review AI use cases for data leakage and privacy concerns
• Partner with GRC to map Joule skills and access against governance, risk, and compliance requirements
• Define and maintain SAP AI security policies, standards, and governance frameworks, including approval and review processes for AI use cases before production deployment
• Perform hands-on security reviews and risk assessments for each POC prior to business rollout
• Conduct security reviews of custom AI agents, establish secure development lifecycle requirements, and define testing procedures for AI agent deployment and production release
• Design and implement monitoring, logging, and audit trails for Joule usage
• Validate secure configurations of AI services, APIs, integrations, and connectors, and support vulnerability management and remediation activities for SAP AI solutions
• Drive security, observability, performance, compliance, and operational excellence standards for enterprise AI solutions across POC and production environments
• Work directly with business stakeholders to explain and resolve security requirements without slowing delivery
• Partner with the functional and technical roles throughout qualification, POC, and deployment
• Keep IT informed of security risks, exceptions, and remediation status
• Educate SAP teams on AI security risks and governance requirements, running workshops for developers, administrators, and business users, and developing guidance for secure prompt engineering and AI agent development
• Maintain security documentation and support internal and external audits

Required Skills and Experience :

• Hands-on security architecture experience in enterprise SAP or cloud environments
• Experience with SAP GRC and access control frameworks
• 5+ years of SAP Security and GRC experience, including SAP S/4HANA Security, SAP GRC Access Control, and SAP Identity Services
• Familiarity with AI/copilot-specific security risks, such as data leakage and prompt-based access issues
• Knowledge of AI security principles, machine learning risks, generative AI technologies, and AI governance frameworks, with experience implementing them in enterprise environments
• Experience with SAP BTP security model and Integration Suite security
• Experience securing cloud-native AI platforms using SAP BTP, SAP AI Core, Kubernetes, hyperscalers, DevSecOps practices, observability controls, and distributed system security patterns
• Familiarity with MCP Server environments hosted on SAP BTP, and the security implications of SAP AI Core, SAP AI Hub, and SAP AI Gateway integrations
• Experience with SAP Business AI, Joule, SAP AI Core, SAP AI Launchpad, and SAP BTP AI services, along with cloud platform experience such as Microsoft Azure
• Strong understanding of data governance and compliance requirements in an enterprise setting
• Ability to work directly and collaboratively with business and technical teams, not just in a gatekeeping capacity
• SAP Security, SAP GRC, CISSP, CISM, or cloud security certification

Qualification:

• Bachelor's degree or equivalent combination of education and experience.