Sr AI Security Architect

Job Title: Sr AI Security Architect Job Type: Contract Location: Fort Worth, TX, Onsite -Hybrid Description: Senior AI Security Architect — Data Security & DSPM Combined senior hire carrying two Critical security scopes Role Summary Own the end-to-end security architecture for Alcon's Agentic AI platform and carry the data-security mandate for AI. This senior role consolidates two Critical scopes — agentic AI security architecture and Data Security Posture Management (DSPM) — into a single accountable owner who designs the secure platform and protects the data flowing through it. Key Responsibilities • Define and own the agentic AI reference security architecture (v1 and beyond), including Platform 1.0 hardening. • Stand up and operate Microsoft Purview DSPM for AI, accelerated via Microsoft FastTrack. • Establish the sensitivity-label and ML auto-classification baseline; map and govern data flows into and out of agents. • Set architecture standards for agent-to-API and agent-to-data access patterns. • Design and secure agentic AI workloads across a multi-cloud estate spanning Azure and AWS, ensuring consistent controls regardless of where agents are built and run. • Partner with the identity, AppSec, and GRC functions to ensure controls are designed in, not bolted on. Required Skills & Qualifications • Deep Azure / M365 security architecture experience; Microsoft Sentinel, Entra, Defender for Cloud. • Hands-on understanding of how to build and secure agents in a multi-cloud setup, including AWS (e.g., Bedrock Agents, AWS Lambda, IAM) alongside Azure. • Hands-on Microsoft Purview — DSPM for AI, sensitivity labels, data-flow mapping, ML-based auto-classification. • API and agent architecture security; familiarity with Copilot Studio / agent platforms. • Proven track record designing enterprise-scale secure architectures in a regulated environment. Preferred Qualifications • Experience in life sciences, medical device, or other regulated manufacturing. • Relevant certifications (e.g., CISSP, Azure Security Engineer, SC-100).