Sr AI Security Architect

Sr AI Security Architect
Fort Worth, TX, Onsite -Hybrid

Job Title: Sr AI Security Architect
Experience Level: 7-12 years
Please find the below Job description.

Senior AI Security Architect Data Security & DSPM
Combined senior hire carrying two Critical security scopes
Role Summary
Own the end-to-end security architecture for Alcon's Agentic AI platform and carry the data-security mandate for AI. This senior role consolidates two Critical scopes agentic AI security architecture and Data Security Posture Management (DSPM) into a single accountable owner who designs the secure platform and protects the data flowing through it.
Key Responsibilities

• Define and own the agentic AI reference security architecture (v1 and beyond), including Platform 1.0 hardening.
• Stand up and operate Microsoft Purview DSPM for AI, accelerated via Microsoft FastTrack.
• Establish the sensitivity-label and ML auto-classification baseline; map and govern data flows into and out of agents.
• Set architecture standards for agent-to-API and agent-to-data access patterns.
• Design and secure agentic AI workloads across a multi-cloud estate spanning Azure and AWS, ensuring consistent controls regardless of where agents are built and run.
• Partner with the identity, AppSec, and GRC functions to ensure controls are designed in, not bolted on.

Required Skills & Qualifications

• Deep Azure / M365 security architecture experience; Microsoft Sentinel, Entra, Defender for Cloud.
• Hands-on understanding of how to build and secure agents in a multi-cloud setup, including AWS (e.g., Bedrock Agents, AWS Lambda, IAM) alongside Azure.
• Hands-on Microsoft Purview DSPM for AI, sensitivity labels, data-flow mapping, ML-based auto-classification.
• API and agent architecture security; familiarity with Copilot Studio / agent platforms.
• Proven track record designing enterprise-scale secure architectures in a regulated environment.

Preferred Qualifications

• Experience in life sciences, medical device, or other regulated manufacturing.
• Relevant certifications (e.g., CISSP, Azure Security Engineer, SC-100).