ABOUT OUR CLIENT / ABOUT THIS ROLE
Medix is currently seeking an AI AppSecOps Engineer for a contract to hire role with one of our national healthcare technology clients.
Our client owns and manages a cloud-native technology product: single source of truth for healthcare provider and member data. The organization is actively integrating generative AI-including Claude, agentic systems, and custom LLMs-across its development lifecycle and Azure infrastructure, requiring strict safeguards for sensitive PHI/PII.
This AI AppSecOps Engineer is a hands-on engineering role to design, build, and enforce threat models, security gates, and policy-as-code controls across CI/CD pipelines, agentic workflows, and user-facing AI features. This is a technical execution role requiring hands-on experience in integrating AI across DevOps and Security workstreams.
RESPONSIBILITIES
- Owning the AI security reference architecture across model hosting, orchestration, and observability before features hit production.
- Implementing and maintaining threat models for AI and agentic systems using OWASP Top 10 for LLMs, MITRE ATLAS, and NIST AI RMF to drive prioritized controls.
- Hardening CI/CD pipelines against injection, jailbreaking, and poisoning.
- Establishing trust boundaries for Agentic AI, least-privilege scoping, short-lived credentials, and human-in-the-loop policies for multi-agent systems.
- Implementing Claude AI Code and Build Integrity through gating, SCA/SBOM, and secrets management for AI-generated code, while also embedding security checks into developer system prompts.
- Applying zero-trust principles and OAuth/OIDC delegation to human and agent identities, ensuring all model calls, tool uses, and vector queries are authenticated and logged.
- Implementing Data Protection & DLP - preventing data poisoning and enforcing tokenization, masking, and DLP across context windows, ETL pipelines, and logs to protect PII, PHI, and PCI.
- Deploying behavioral telemetry to detect injection attempts, data exfiltration, and runaway agents, serving as SME for AI security incidents.
- Mapping AI systems to SOC 2, HIPAA, ISO 27001, and NIST RMF frameworks.
- Integrating AI firewalls and guardrails into SIEM/SOAR.
REQUIRED SKILLS & QUALIFICATIONS
- 10+ years of professional experience, with a College Degree.
- AI AppSecOps - Must have a subject matter expertise in cloud-native and AI-based AppSecOps.
- IaC Security - Secure coding expertise in Python and Terraform.
- IAM - Deep experience in OAuth 2.0, OIDC, SAML, and SCIM applied to agentic and non-human identities.
- CI/CD Security Gating - Ability to build custom policy checks from scratch for automated delivery pipelines.
- Data Security & Secrets - Practical application of DLP, encryption, tokenization, and secrets managers (Vault, AWS, Azure).
- Agentic Frameworks & Guardrails - Deep security knowledge of orchestration frameworks (LangChain, LangGraph, AutoGen) with the ability to engineer automated agent kill-switches and rollback controls.