AI Platform & Security Engineer

The AI Platform & Security Engineer will help design, build, operate, and secure SGA Dental Partners’ AI environment. As at many companies, AI is increasingly part of SGA’s daily business operations, with hundreds of dental practices and a robust corporate team looking to quickly and securely adopt this new technology. This role is responsible for implementing guardrails and other technical controls that allow internal teams to quickly implement AI while maintaining security and compliance baselines.

The AI Platform & Security Engineer will serve as a key member of the Enterprise Architecture & Security team, working alongside other departments and business stakeholders. Priorities include establishing and centralizing hosting infrastructure, code repositories, identity provider strategy, secrets management, and source control for AI workloads. Later work will focus on automated scanning, agent evaluation, security hardening, and policy enforcement so that approved patterns can be deployed without manual review.

Pay: $125,000 - $150,000

Schedule: full time, Mon - Fri 8 - 5

Key Responsibilities

• Administer the enterprise LLM platform, including identity management, provisioning, licensing, usage monitoring, and controls.
• Build and operate the AI integration layer: MCP server and connector management, service principals, service accounts, API and secrets management, sandbox and production environments, custom and third-party integrations (Microsoft Entra, Graph, etc).
• Establish and document standard patterns for agents, so that new agents follow an approved design.
• Configure model routing across cloud providers with PHI handling requirements integrated from the beginning.
• Implement automated scanning of code and agents built by users, agent evaluation and testing, and PHI guardrails enforced in the delivery pipeline.
• Establish secure development practices for AI and internally developed software, including secrets scanning, sensitive-data detection in repositories, dependency review, and pre-commit controls.
• Implement and tune data loss prevention tools and access controls for AI traffic and AI-connected systems.
• Produce technical evidence in support of HIPAA and financial-controls requirements as part of normal system design.
• Lead technical remediation when sensitive data is found outside approved locations.
• Build, operate, and harden cloud environments that host internal applications, dashboards, and AI-powered services.
• Maintain least-privilege access across identity and access management, secrets lifecycle, source control, and deployment paths for all AI workloads.
• Build self-service infrastructure so that approved options are readily available to teams.
• Onboard users and teams onto the platform, deploy environments, and troubleshoot with users.
• Convert repeated requests into self-service capabilities and documentation through secure and compliant automation.
• Use AI coding tools (Claude Code, Codex, or equivalent) as a primary development workflow and help other engineers adopt them effectively, implementing best practices and DevSecOps principles.
• Maintain the internal code and library standards for AI workloads: shared modules, dependency management, versioning, testing, and documentation, so that code built across teams is consistent, reviewable, and supportable.
• Participate in change management and documentation for infrastructure, integrations, and controls.
• Escalate risks and control gaps to the Director of Enterprise Architecture & Security.

Knowledge/Skills/Abilities

• Daily, fluent use of AI coding tools (Claude Code, Codex, GitHub Copilot, or equivalent).
• Hands-on experience with major cloud platforms (Azure preferred) and modern identity providers (Entra ID, OAuth, service principals).
• Working knowledge of secure development practices: secrets management, static analysis, dependency scanning, and code review.
• Ability to read and reason about unfamiliar code quickly.
• Understanding of HIPAA as it applies to engineering architecture and data governance, or the ability to learn it quickly.
• Familiarity with LLM application patterns such as agents, tools / skills, retrieval, MCP connectors, and agent evaluation.
• Strong written communication; a significant part of the work is producing documentation, standards, and control evidence, along with occasional presentations or internal memos.
• Disciplined coding practices: modular design, reuse over duplication, clear naming, tests, and documentation written for the next engineer rather than the current one.
• Track and optimize AI platform spend, including seat, token, and infrastructure costs; identifying where existing tools can meet a need before AI implementation or additional spend is considered.
• Ability to work with non-technical stakeholders or executives and translate requirements into secure designs.
• Self-directed, with sound judgment about when to proceed and when to escalate.
• Comfortable handling requests from stakeholders while following proper approval policies and workflows.
• Strong ability to understand and follow corporate policy, procedures, and standards, with an emphasis on change management.

Education & Experience:

• Minimum of 4 years in software, platform, and/or security engineering with production ownership.
• Bachelor's degree in computer science, information systems, or related field / experience.
• Experience in healthcare, dental, or another regulated-data environment is preferred.
• Experience working with SQL, Postgres, or other similar relational databases is preferred.
• Security certifications (Security+, CISSP, CCSP, AAISM, SecAI+, or similar) are a plus.
• Experience with GitHub, Cloudflare, Railway, Microsoft 365, Azure, or Power BI is a plus.
• Experience in a fast-growing, multi-site organization is a plus.
• Prior IT experience is a plus.

Benefits We Offer:

• Paid Holidays and Paid Time Off (PTO)
• 401(k) Retirement Plan
• Health and Vision Insurance
• Employer-Paid Dental Insurance, Life Insurance, Care.com Membership & Employee Assistance Program
• Supplemental Coverage (Disability, Critical Illness, Accident)
• Career Growth and Development Opportunities

This position is eligible for remote work in the following states: Alabama, Arizona, California, Colorado, Florida, Georgia, Illinois, Indiana, Kansas, Kentucky, Louisiana, Maryland, Michigan, Minnesota, Mississippi, Missouri, Nevada, New Mexico, North Carolina, Ohio, Pennsylvania, South Carolina, Tennessee, Texas, Utah, Virginia, Washington, Wisconsin.

In hometown communities, SGA Dental Partners is a beacon of positive energy, delivering the highest level of clinical excellence and patient-centered care. Apply today to join us in making a difference!

In order to maintain a high level of clinical excellence, SGA Dental Partners and dental practices affiliated with SGA maintain a drug free and alcohol free workplace. All new hires are required to pass a full panel drug screening as a condition of employment.

SGA Dental Partners is an Equal Opportunity Employer and values diversity at every level of our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.