AI Data & Security Governance Engineer (MAD-BS-OR)

Description

This role is in the Metrology and Analysis Systems Division (MAD) and supports the company's distributed engineering and data science teams.

You will build technical guardrails so those teams can work quickly without creating security or compliance gaps.

Instead of only writing policy, you will put governance into code: automated security controls, data access infrastructure, and model evaluation and security checks inside CI/CD pipelines.

You will work with other divisions to keep data storage, LLM deployments and application architecture secure, compliant and high performing.

Position title: AI Data & Security Governance Engineer (AIE).

Responsibilities

• Design, implement and maintain fine-grained role-based access control (RBAC) and identity management across cloud infrastructure and internal tools.
• Build automated masking, anonymization and encryption into data ingestion and processing pipelines.
• Secure distributed storage and make sure compute instances and databases are configured securely.
• Harden cloud IAM, manage secrets with tools such as HashiCorp Vault or AWS Secrets Manager, and apply zero-trust patterns to data access.
• Architect secure vector databases, such as Milvus, Pinecone or pgvector, with tenant isolation and metadata-level filtering.
• Build technical safeguards for large language models such as Llama or similar, including input and output filtering against prompt injection and data leakage.
• Add automated security scanning, fairness and bias testing, and model performance evaluations to the standard CI/CD deployment process.
• Create telemetry and real-time alerts for model drift, unusual API usage and compliance gaps.
• Automate the extraction and cataloguing of metadata so end-to-end data lineage is tracked in code.
• Write automated reports and dashboards that give continuous visibility into data access logs and model compliance for security audits.
• Other duties as assigned.

Requirements

• Master's degree in Computer Security, AI Engineering or Governance, Software Engineering or a related field, or an equivalent mix of education and experience.
• At least 5 years in software, data or security engineering.
• At least 5 years programming in Python, SQL, Bash, Go or similar languages used in data and infrastructure work.
• At least 5 years deploying and securing machine learning models, including generative AI and LLMs, in production.
• At least 5 years working with CI/CD pipelines, Git workflows (such as monorepo architecture) and infrastructure-as-code tools.
• At least 5 years on governance platforms such as Collibra, Immuta or Privacera.
• At least 5 years working with frameworks and audits such as NIST AI RMF, ISO 42001 and OWASP LLM Top 10.
• At least 1 year hands-on implementing AI guardrails and moderation pipelines, such as NeMo Guardrails, Llama Guard or Guardrails AI.
• At least 1 year in AI red teaming, adversarial robustness testing, and hallucination and bias monitoring.
• A solid grasp of data security, covering encryption, IAM and secure network architecture.
• Working knowledge of cloud platforms and how distributed storage is built.
• Understanding of AI weak points, such as those in the OWASP Top 10 for LLMs, and how to reduce them.
• Strong problem-solving skills and a strong work ethic.
• Can perform well under pressure when release schedules are tight.
• Comfortable working in a small, demanding team of fewer than 10 members.
• Able to set priorities and juggle several responsibilities at once.
• Strong verbal and written communication with people at every level, inside and outside the company.
• Able to get from place to place quickly by air, car or other means.
• Follow all corporate safety requirements and directives.
• Use personal protective equipment (PPE) when required.
• Follow all equipment-specific safety protocols.
• Preferred: at least 5 years working with distributed teams across several geographic regions.
• Preferred: familiarity with compliance frameworks such as GDPR and CCPA, and turning them into technical requirements.

Conditions

Based in Hillsboro, OR (NCP).

Hybrid (+50% onsite): 60% onsite and 40% remote.

Not a remote role.

Full-time position.

Travel up to 25%, domestic and international.

Base pay range: $134,476 to $184,905 per year, base pay only.

Job category: IT, Telecom & Internet.

Job ID: R0144180. Date posted: 2026-09-16.

Additional information about pay will be shared during the interview and selection process.

Benefits

• May be eligible for incentive pay and/or allowances in addition to base pay.