What are the responsibilities and job description for the Senior AI Platform Engineer position at Diligent Tec, Inc?
Job Title: Senior AI Platform Engineer
Location: Chicago, IL - Day 1Onsite
Type: Long term contract
Hands-on operational role | Individual contributor | Regulated enterprise environment | Day-one platform ownership required
Role Summary
This is a hands-on operational role responsible for the day-to-day deployment, administration, security
integration, and governance of BCBSA's Claude Enterprise and ChatGPT Enterprise tenants. This is not an
architecture or advisory position. The successful candidate will own platform operations from day one — tenant
configuration, user lifecycle, connector governance, audit log pipelines, incident response, and ongoing security
controls under a CISO and CIO in a regulated enterprise environment. No PHI is processed, stored, or permitted
in any AI platform at BCBSA.
Technology Stack
— Candidate Must Operate In Claude Enterprise Primary AI platform
— full tenant administration ChatGPT Enterprise Secondary AI platform
— full tenant administration Okta Identity provider
— SSO enforcement & user lifecycle SCIM Automated provisioning & deprovisioning to AI platforms CyberArk PAM
— API key vaulting & credential rotation Splunk Audit log ingestion, monitoring & anomaly detection Microsoft 365 Current connector ecosystem
— SharePoint, Teams, Outlook ServiceNow Ticketing & change control for platform requests Hard Requirements
— Non-Negotiable Every item below must be demonstrated with prior hands-on experience. Familiarity, exposure, or architectural
knowledge is not sufficient. Candidates will be asked to walk through specific deployments in detail during the interview process.
• Claude Enterprise & ChatGPT Enterprise
— hands-on tenant administration. Tenant setup, organizational policy configuration, feature controls, and ongoing production ownership. Must
demonstrate prior tenant-level administration
— not API usage or model development.
• Identity & access management for SaaS platforms
— Hands-on ownership of SSO enforcement and automated user lifecycle (provisioning, deprovisioning, access recertification) for a governed enterprise
SaaS platform. Experience integrating an IdP and automated provisioning directly with the platform you administered
— not consuming identity services built by another team. Okta and SCIM preferred.
• Privileged access &; secrets management for SaaS platforms
— Hands-on experience with API key vaulting, credential rotation, and service account governance for enterprise SaaS platform integrations
and connectors. CyberArk preferred; equivalent PAM platforms acceptable.
• SIEM-based audit log pipeline & monitoring for SaaS platforms
— Hands-on ownership of an audit log pipeline for a governed enterprise SaaS platform
— pipeline design, log ingestion, parsing, dashboard creation, and anomaly detection tied to platform activity. Splunk preferred; equivalent SIEM platforms
acceptable.
• Enterprise AI platform connector governance & operations
— Administration, permission scoping, security review, change control, and operational monitoring of connectors within Claude Enterprise and
ChatGPT Enterprise
— including current and future integrations across any enterprise system. The connector ecosystem will grow and the candidate must be able to govern and operate new connectors as
they are introduced.
• Enterprise AI platform security controls
— Data classification enforcement, acceptable use policy controls, access recertification, and audit evidence maintenance at the platform level.
Preferred Qualifications
• Healthcare or payer industry background
— Familiarity with the regulatory and data sensitivity environment of a national health insurance organization and the governance expectations that come with
it.
• Enterprise SaaS platform operations at scale
— Prior experience owning a governed SaaS platform under a CISO
— including change control, executive reporting, and formal audit support.
• Acceptable use policy enforcement
— Hands-on experience detecting, investigating, and responding to user policy violations within an enterprise AI platform
— not just writing the policy.
• Platform usage analytics & executive reporting
— Ability to produce monthly engagement metrics, user adoption trends, and security event summaries for CISO and CIO audiences from audit log data.
Core Operational Responsibilities
Platform administration Daily tenant management, configuration control, feature governance, and policy enforcement across both AI platforms User lifecycle Provisioning, deprovisioning, access recertification, and role management via Okta and SCIM
Incident response First responder for platform outages, connector failures, SSO issues, and security events
Connector operations Governance, monitoring, and change control for all current and future enterprise system connectors across both AI platforms
Security monitoring Splunk pipeline ownership, anomaly detection, policy violation response, and audit log integrity
Executive reporting Monthly usage metrics, engagement analytics, and security event
summaries for CISO and CIO
What This Role Is Not
This is not an AI engineering, ML, or model development role. Candidates whose primary experience is building RAG pipelines, fine-tuning models, designing AI architectures, or advising on AI strategy are NOT the right profile
— even if they have incidental Claude or ChatGPT Enterprise exposure. This role requires someone whose primary professional identity is platform operations and security integration, not AI engineering or architecture.
Reporting Structure
Reports to Senior Information Security &Technology leadership. Works closely with CISO and CIO. Operates as an individual contributor with broad platform ownership and no direct reports. Must be comfortable working in a structured governance environment with formal change control, CAB approval processes, and executive-level reporting requirements.
Location: Chicago, IL - Day 1Onsite
Type: Long term contract
Hands-on operational role | Individual contributor | Regulated enterprise environment | Day-one platform ownership required
Role Summary
This is a hands-on operational role responsible for the day-to-day deployment, administration, security
integration, and governance of BCBSA's Claude Enterprise and ChatGPT Enterprise tenants. This is not an
architecture or advisory position. The successful candidate will own platform operations from day one — tenant
configuration, user lifecycle, connector governance, audit log pipelines, incident response, and ongoing security
controls under a CISO and CIO in a regulated enterprise environment. No PHI is processed, stored, or permitted
in any AI platform at BCBSA.
Technology Stack
— Candidate Must Operate In Claude Enterprise Primary AI platform
— full tenant administration ChatGPT Enterprise Secondary AI platform
— full tenant administration Okta Identity provider
— SSO enforcement & user lifecycle SCIM Automated provisioning & deprovisioning to AI platforms CyberArk PAM
— API key vaulting & credential rotation Splunk Audit log ingestion, monitoring & anomaly detection Microsoft 365 Current connector ecosystem
— SharePoint, Teams, Outlook ServiceNow Ticketing & change control for platform requests Hard Requirements
— Non-Negotiable Every item below must be demonstrated with prior hands-on experience. Familiarity, exposure, or architectural
knowledge is not sufficient. Candidates will be asked to walk through specific deployments in detail during the interview process.
• Claude Enterprise & ChatGPT Enterprise
— hands-on tenant administration. Tenant setup, organizational policy configuration, feature controls, and ongoing production ownership. Must
demonstrate prior tenant-level administration
— not API usage or model development.
• Identity & access management for SaaS platforms
— Hands-on ownership of SSO enforcement and automated user lifecycle (provisioning, deprovisioning, access recertification) for a governed enterprise
SaaS platform. Experience integrating an IdP and automated provisioning directly with the platform you administered
— not consuming identity services built by another team. Okta and SCIM preferred.
• Privileged access &; secrets management for SaaS platforms
— Hands-on experience with API key vaulting, credential rotation, and service account governance for enterprise SaaS platform integrations
and connectors. CyberArk preferred; equivalent PAM platforms acceptable.
• SIEM-based audit log pipeline & monitoring for SaaS platforms
— Hands-on ownership of an audit log pipeline for a governed enterprise SaaS platform
— pipeline design, log ingestion, parsing, dashboard creation, and anomaly detection tied to platform activity. Splunk preferred; equivalent SIEM platforms
acceptable.
• Enterprise AI platform connector governance & operations
— Administration, permission scoping, security review, change control, and operational monitoring of connectors within Claude Enterprise and
ChatGPT Enterprise
— including current and future integrations across any enterprise system. The connector ecosystem will grow and the candidate must be able to govern and operate new connectors as
they are introduced.
• Enterprise AI platform security controls
— Data classification enforcement, acceptable use policy controls, access recertification, and audit evidence maintenance at the platform level.
Preferred Qualifications
• Healthcare or payer industry background
— Familiarity with the regulatory and data sensitivity environment of a national health insurance organization and the governance expectations that come with
it.
• Enterprise SaaS platform operations at scale
— Prior experience owning a governed SaaS platform under a CISO
— including change control, executive reporting, and formal audit support.
• Acceptable use policy enforcement
— Hands-on experience detecting, investigating, and responding to user policy violations within an enterprise AI platform
— not just writing the policy.
• Platform usage analytics & executive reporting
— Ability to produce monthly engagement metrics, user adoption trends, and security event summaries for CISO and CIO audiences from audit log data.
Core Operational Responsibilities
Platform administration Daily tenant management, configuration control, feature governance, and policy enforcement across both AI platforms User lifecycle Provisioning, deprovisioning, access recertification, and role management via Okta and SCIM
Incident response First responder for platform outages, connector failures, SSO issues, and security events
Connector operations Governance, monitoring, and change control for all current and future enterprise system connectors across both AI platforms
Security monitoring Splunk pipeline ownership, anomaly detection, policy violation response, and audit log integrity
Executive reporting Monthly usage metrics, engagement analytics, and security event
summaries for CISO and CIO
What This Role Is Not
This is not an AI engineering, ML, or model development role. Candidates whose primary experience is building RAG pipelines, fine-tuning models, designing AI architectures, or advising on AI strategy are NOT the right profile
— even if they have incidental Claude or ChatGPT Enterprise exposure. This role requires someone whose primary professional identity is platform operations and security integration, not AI engineering or architecture.
Reporting Structure
Reports to Senior Information Security &Technology leadership. Works closely with CISO and CIO. Operates as an individual contributor with broad platform ownership and no direct reports. Must be comfortable working in a structured governance environment with formal change control, CAB approval processes, and executive-level reporting requirements.