Senior AI Platform Engineer

Position:Senior AI Platform Engineer
Location: Chicago,IL(Onsite)

This is a hands-on operational role responsible for the day-to-day deployment, administration, security integration, and governance of BCBSA's Claude Enterprise and ChatGPT Enterprise tenants. This is not an architecture or advisory position. The successful candidate will own platform operations from day one — tenant configuration, user lifecycle, connector governance, audit log pipelines, incident response, and ongoing security controls under a CISO and CIO in a regulated enterprise environment. No PHI is processed, stored, or permitted in any AI platform at BCBSA.

Technology Stack — Candidate Must Operate In
Claude Enterprise
Primary AI platform — full tenant administration
ChatGPT Enterprise
Secondary AI platform — full tenant administration
Okta
Identity provider — SSO enforcement & user lifecycle
SCIM
Automated provisioning & deprovisioning to AI platforms
CyberArk
PAM — API key vaulting & credential rotation
Splunk
Audit log ingestion, monitoring & anomaly detection
Microsoft 365
Current connector ecosystem — SharePoint, Teams, Outlook
ServiceNow
Ticketing & change control for platform requests
Hard Requirements — Non-Negotiable
Every item below must be demonstrated with prior hands-on experience. Familiarity, exposure, or architectural knowledge is not sufficient. Candidates will be asked to walk through specific deployments in detail during the interview process.

•      Claude Enterprise & ChatGPT Enterprise  —  hands-on tenant administration. Tenant setup, organizational policy configuration, feature controls, and ongoing production ownership. Must demonstrate prior tenant-level administration — not API usage or model development.

•      Identity & access management for SaaS platforms  —  Hands-on ownership of SSO enforcement and automated user lifecycle (provisioning, deprovisioning, access recertification) for a governed enterprise SaaS platform. Experience integrating an IdP and automated provisioning directly with the platform you administered — not consuming identity services built by another team. Okta and SCIM preferred.

•      Privileged access & secrets management for SaaS platforms  —  Hands-on experience with API key vaulting, credential rotation, and service account governance for enterprise SaaS platform integrations and connectors. CyberArk preferred; equivalent PAM platforms acceptable.

•      SIEM-based audit log pipeline & monitoring for SaaS platforms  —  Hands-on ownership of an audit log pipeline for a governed enterprise SaaS platform — pipeline design, log ingestion, parsing, dashboard creation, and anomaly detection tied to platform activity. Splunk preferred; equivalent SIEM platforms acceptable.

•      Enterprise AI platform connector governance & operations  —  Administration, permission scoping, security review, change control, and operational monitoring of connectors within Claude Enterprise and ChatGPT Enterprise — including current and future integrations across any enterprise system. The connector ecosystem will grow and the candidate must be able to govern and operate new connectors as they are introduced.

•      Enterprise AI platform security controls  —  Data classification enforcement, acceptable use policy controls, access recertification, and audit evidence maintenance at the platform level.

Preferred Qualifications
•      Healthcare or payer industry background  —  Familiarity with the regulatory and data sensitivity environment of a national health insurance organization and the governance expectations that come with it.

•      Enterprise SaaS platform operations at scale  —  Prior experience owning a governed SaaS platform under a CISO — including change control, executive reporting, and formal audit support.

•      Acceptable use policy enforcement  —  Hands-on experience detecting, investigating, and responding to user policy violations within an enterprise AI platform — not just writing the policy.

•      Platform usage analytics & executive reporting  —  Ability to produce monthly engagement metrics, user adoption trends, and security event summaries for CISO and CIO audiences from audit log data.

Core Operational Responsibilities
Platform administration
Daily tenant management, configuration control, feature governance, and policy enforcement across both AI platforms
User lifecycle
Provisioning, deprovisioning, access recertification, and role management via Okta and SCIM
Incident response
First responder for platform outages, connector failures, SSO issues, and security events
Connector operations
Governance, monitoring, and change control for all current and future enterprise system connectors across both AI platforms
Security monitoring
Splunk pipeline ownership, anomaly detection, policy violation response, and audit log integrity
Executive reporting
Monthly usage metrics, engagement analytics, and security event summaries for CISO and CIO
This role requires someone whose primary professional identity is platform operations and security integration, not AI engineering or architecture.