Job Description
WebMD is the most recognized and trusted brand of health information and the leading provider of health information services, serving consumers, physicians, healthcare professionals, employers and health plans through our public and private online portals and WebMD the Magazine. The WebMD Health Network includes WebMD, Medscape, MedicineNet, eMedicine, RxList, theheart.org and Medscape Education. Our consumer portals and mobile health applications provide engaging, relevant and credible health and wellness information, personalized health assessment tools and access to online communities.
WebMD is an Equal Opportunity/Affirmative Action employer and does not discriminate on the basis of race, ancestry, color, religion, sex, gender, age, marital status, sexual orientation, gender identity, national origin, medical condition, disability, veterans status, or any other basis protected by law.
Position
TheAI&SystemsEngineerisahybridinfrastructureandAIoperationsroleresponsibleformanaging thefullenterpriseITstackwhilealsoarchitecting,deploying,securing,andgoverningAIsystemsacross theorganization.ThisroleservesastheprimarytechnicalownerforAIplatformintegrations—including largelanguagemodels,MCPservers,andconnectorecosystems—alongsidetraditionalsystemsadministrationresponsibilitiescoveringWindows Server,cloudplatforms,networkinfrastructure,andenterprise security.Theidealcandidatebridgesdeepinfrastructureexpertisewithhands-onAIengineering,ensuringAIsystemsaredeployedwith rigor, properlyhardened,andtightlyintegratedwithexistingenterpriseidentityandsecuritycontrols.
PositionRequirements:
Infrastructure& SystemsAdministration
- Experienceacrossthecompleteinfrastructurestack:network, security,storage,hardware,andOSlayer
- ExpertisewithWindowsServeradministration,configuration,upgrades,andlifecycle management
- DeepexpertiseinPowerShellscriptingforautomation,provisioning,reporting,andsystemsmanagement
- ExpertiseinDNSandDHCPadministration,includingWindowsServerDNSroles,zone management,conditionalforwarding,split-brainDNS,andDNSSEC
- ExperiencewithenterprisebackuptoolsincludingNetApp;buildingDRenvironmentsand failoverplans
- Proficiencywithvirtualizationplatforms:VMwareand/orHyper-V
- Experiencemanagingandmaintainingsecuritypatchesacrossserverandapplicationestates
- Experiencemigratingdataacrosscloud,hybrid,andon-premisesenvironments
- Abilitytoplan,organize,anddocumentcomplexsystemmaintenanceactivities;configure systemsconsistentwithinstitutionalpoliciesandprocedures
- Comfortablewithon-callschedulesandresponsetocriticalalertsinatimelymanner
Cloud& ProductivityPlatforms
- ExperiencewithGoogle Workspace administration(userlifecycle,OUmanagement,GAMscripting)
- ExperiencewithGoogleCloudPlatform(GCP)infrastructureandservices
- ExperiencewithMicrosoft Office 365administrationincludinglicensing,ExchangeOnline,andcompliance
- ExperiencewithMicrosoftAzureincludingEntraID(formerlyAzureAD),ConditionalAccess,PIM,andAzureresourcemanagement
- FamiliaritywithsettingupandconfiguringapplicationswithAzureSSOorGoogleSSO(SAML,OIDC,OAuth2.0)
AISystemsEngineering& Operations
- Hands-onexperiencedeploying,configuring,andadministeringlargelanguagemodel(LLM) platformsincludingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini acrossenterpriseenvironments
- ExperiencearchitectingandadministeringMCP(ModelContextProtocol)serverinfrastructure: deployingMCPserverinstances,configuringtoolregistries,managingconnectorecosystems (Airtable,Atlassian,GoogleDrive,Gmail,andothers),andintegratingMCPserverswith enterpriseidentityandaccesscontrols
- AbilitytodesignandenforceAIconnectorgovernancepolicies:scopemanagement,permission auditing,credentiallifecycle,andconnectoraccessreviews
- ExperienceperformingAIplatformsecurityassessmentscoveringpermissionscopes,data flows,outputvalidationpipelines,promptinjectiondefenses,andHITL(Human-in-the-Loop) controls
- FamiliaritywithAIhardeningprinciples:modelaccesscontrols,ratelimiting, WAFintegration,APIgatewayconfiguration,sessioncontrols,andkillswitchhierarchiesforAIsystems
- Experience configuringandmonitoringSIEMdetectionrulesforAIplatformactivityandanomaly detection
- Understanding ofresponsibleAIdeploymentincludingdataresidencyrequirements, privacy-by-design,auditlogging,andregulatoryalignment(HIPAA,GDPRasapplicable)
- Ability toevaluatenewAItoolsandplatformsagainstenterprisesecuritystandardspriortoproductiondeployment
- Experience authoringAIsystemsdocumentation:architecturediagrams,runbooks,security assessments,andgovernancepolicies
Security& Compliance
- Knowledgeofapplicabledataprivacypractices,laws,andregulations (HIPAA,SOC2,GDPRfundamentals)
- Experiencewithidentityandaccessmanagement(IAM)tooling:EntraID,Active Directory,SAML/OIDCfederation, MFAenforcement,andprivilegedaccessmanagement
- Familiaritywithnetworksecurityconceptsincludingfirewall policy,VPNadministration, WAFconfiguration,andzero-trustnetworkaccessmodels
- ExperiencewithendpointmanagementusingMicrosoftIntuneorcomparableMDMsolutions
Certifications& Nice-to-Have
- CertificationsinVMware, Hyper-V, MCSE,MCSA,or AWS/AzureSolutionsArchitectaredesirable
- CertificationsorcourseworkinAI/MLplatforms,promptengineering,orresponsibleAIareaplus
- Experiencewithinfrastructure-as-codetooling( Terraform,Bicep,orcomparable)is advantageous
- FamiliaritywithSIEMplatforms(MicrosoftSentinel,Splunk,orsimilar)forsecuritymonitoring
- ExperiencewithacquisitionITintegration:userprovisioning,mailboxmigrations,SSOfederation, anddirectoryconsolidation
Roles&Responsibilities
InfrastructureOperations
- Providetechnicalsupporttocorporatebusinessunitsandsupporttheirapplicationsacrossthe enterprise
- Maintaintheback-endITinfrastructureestateincludingservers,storage,UPS,andHyper-V environments
- PerformWindowsServerupgrades,rebuilds,andOSlifecyclemanagement
- Manageandmaintainsecuritypatchesacrossserverinfrastructureonadefinedcadence
- Migratedataacrosscloud,hybrid,andon-premisesenvironmentswithdocumentedrollback plans
- AdministerandmaintainWindowsServerDNSincludingzonehealth,recordlifecycle, replication,andconditionalforwardingconfigurations
- BuildandmaintainDRenvironments,runbooks,andfailover/failbackplans;participateinDR testingexercises
- WorkwithorwithoutformalSOPs;authorandmaintainrunbooksandtechnicaldocumentationasenvironmentsevolve
- Proactively learnanddocumenttheenvironmentsofcurrentandfutureacquiredcompaniestoenablesmoothintegration
- Serve asathoughtleaderandarchitectnewIDF/MDFconfigurations;identifyopportunitiestoscalebackorsynergizeinfrastructureacrosstheportfolio
- Be comfortablewithon-callschedulesandrespondtocriticalalertsinatimelyand effectivemanner
AISystemsEngineering& Governance
- Ownthedeployment,configuration,andongoingadministrationofenterpriseAIplatforms includingAnthropicClaude(claude.ai,ClaudeAPI,ClaudeCode)andGoogleGemini;manage platformaccounts,accesspolicies,andusagegovernance
- ArchitectandmanagetheenterpriseMCPserverinfrastructure:deployandmaintainMCPserver instances,configuretoolandconnectorregistries,manageconnectorlifecycle(onboarding, auditing,deprecation),andenforcedataflowandpermissionpoliciesacrossconnectors
- IntegrateAIplatformsandMCPserverswithenterpriseIAMcontrols(EntraIDAzureADSSO,ConditionalAccess, MFA) toensureAIsystemaccessisgovernedthroughstandardidentitypipelines
- ConductperiodicAIconnectorandplatformsecurityassessmentscoveringpermissionscopes, credentialexposure,data residency,outputvalidation,andpromptinjectionrisk;documentfindingsanddriveremediation
- ImplementandmaintainAIhardeningcontrols:APIgatewayratelimiting, WAFrulesforAIendpoints,sessionmanagement,killswitchprocedures,andanomalymonitoringviaSIEM
- PartnerwithbusinessunitstoevaluatenewAItoolsandvendorplatforms;perform pre-deployment securityreviewsandproducearchitecturedocumentationbeforeproduction rollout
- Maintain comprehensivedocumentationforallAIsystems:architecturediagrams,security assessmentreports,connectorgovernancepolicies,andoperationalrunbooks
- Stay currentwithdevelopmentsinenterpriseAIplatforms,MCPecosystemtooling,andAIsecuritybestpractices;translateemergingcapabilitiesintoactionableinfrastructure improvements
- Collaborate withlegal,compliance,andsecurityteamstoensureAIplatformusagealignswith HIPAA, dataprivacyobligations,andorganizationalpolicy
Collaboration& StakeholderEngagement
- Establishstrongworkingrelationshipswithcorporatebusinessunits,theOperationsteam,ITleadership,anddirectmanager
- Workcross-functionallytocoordinatelarge-scaleinfrastructure efforts,migrations,andAIplatformrollouts
- RepresentITinfrastructureandAIoperationsasasubject-matterexpertincross-teamplanning andarchitecturediscussions
- Communicateprojectstatus,risks,anddecisionsclearlytobothtechnicalandnon-technical stakeholders
Salary range: $120,000 - $145,000
Bonus Eligible: This position is also eligible for a discretionary company bonus, based upon business results.
Benefits: Employees in this position are eligible to participate in the company sponsored benefit programs, including the following within the first 12 months of employment:
- Health Insurance (medical, dental, and vision coverage)
- Paid Time Off (including vacation, sick leave, and flexible holiday days)
- 401(k) Retirement Plan with employer matching
- Life and Disability Insurance
- Employee Assistance Program (EAP)
- Commuter and/or Transit Benefits (if applicable)
Eligibility for specific benefits may vary based on job classification, schedule (e.g., full-time vs. part-time), work location and length of employment.
