POSITION SUMMARY:
We are seeking a Cybersecurity & AI/Data Governance Intern to bridge the gap between security compliance and engineering. In this role you will assist in the design, audit, and implement technical guardrails that protect our infrastructure and govern our data and AI systems.
This position is ideal for an engineer who understands full-stack architectures, infrastructure-as-code, and systems administration, and wants to apply those skills to modern security engineering, Identity Governance and Administration (IGA), and secure AI deployment.
By the conclusion of this internship, you will progress beyond basic compliance tasks and actively contribute to the development of solutions addressing enterprise security and AI needs. Through your work, you will gain practical experience in implementing automated identity lifecycle management, conducting security audits for both cloud and on-premises infrastructures, and establishing data governance policies that enable the secure expansion of AI initiatives.
Profile: Cybersecurity & AI / Data Governance Intern
Department: Information Security
Schedule: Full Time
Pay: $15.00-$17.00
ESSENTIAL DUTIES & RESPONSIBILITIES:
Identity Governance & Secure Architecture
Audit and refine RBAC permissions across all platforms.
Integrate and modernize Identity Providers using OIDC/SAML for secure access.
Develop secure, reusable infrastructure templates with Terraform, Ansible, or AWS CDK to meet compliance standards.
Systems Security & Infrastructure Integrity
Harden enterprise Linux and containerized environments.
Configure firewall, VLANs, and network protocols to segment development, production, and HPC environments.
Monitor logs and patch systems to address vulnerabilities.
AI & Data Governance Frameworks
Define data workflows and ensure privacy and retention in data pipelines (LDAP/ZFS).
Set security controls for Vision-Language Models and vector searches to prevent unauthorized data/model access.
Oversee GPU resources and enforce usage policies to support compliance.
Preferred Technical Experience
Languages: Python, TypeScript, Java/Kotlin, or C/C++.
Identity & Networking: Understanding of OIDC, SAML, LDAP, TCP/IP, DNS, and Firewalls.
Infrastructure & DevOps: Practical experience with Linux systems administration (RHEL preferred), virtualization/containers (Docker, Kubernetes, Proxmox), and CI/CD automation (GitHub Actions, Ansible, Terraform).
Database & Storage: Familiarity with caching layers (Redis/Valkey), structured/unstructured databases (SQL, MongoDB), and redundant storage file systems (ZFS).
Compensation Range:
$0.01- $0.00This range offers an estimate based on the minimum job qualifications. However, our approach to determining base pay is comprehensive, and a broad range of factors is considered when making an offer. This includes education, experience, skills, and certifications/licensures as they directly relate to position requirements; as well as business/organizational needs, internal equity, and market-competitiveness. In addition, BMCHS offers generous total compensation that includes, but is not limited to, benefits (medical, dental, vision, pharmacy), discretionary annual bonuses and merit increases, Flexible Spending Accounts, 403(b) savings matches, paid time off, career advancement opportunities, and resources to support employee and family well-being.
NOTE: This range is based on Boston-area data, and is subject to modification based on geographic location.
Equal Opportunity Employer/Disabled/Veterans
According to the FTC, there has been a rise in employment offer scams. Our current job openings are listed on our website and applications are received only through our website. We do not ask or require downloads of any applications, or “apps” job offers are not extended over text messages or social media platforms. We do not ask individuals to purchase equipment for or prior to employment.
Skills Required
- Understand full-stack architectures, infrastructure-as-code, and systems administration
- Design, audit, and implement technical security guardrails for infrastructure and AI/data systems
- Implement automated identity lifecycle management; audit and refine RBAC across platforms; integrate Identity Providers (OIDC/SAML)
- Conduct security audits for cloud and on-premises infrastructures; harden enterprise Linux and containerized environments; monitor logs and patch systems
- Define data workflows ensuring privacy and retention in data pipelines; set security controls for vision-language models and vector searches; oversee GPU resource policies
- Programming languages: Python, TypeScript, Java/Kotlin, or C/C++
- Identity & Networking: OIDC, SAML, LDAP, TCP/IP, DNS, and Firewalls
- Infrastructure & DevOps: Linux systems administration (RHEL preferred), Docker, Kubernetes, Proxmox, CI/CD (GitHub Actions), Ansible, Terraform, AWS CDK
- Database & Storage: Redis/Valkey, SQL, MongoDB, ZFS
Boston Medical Center (BMC) Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Boston Medical Center (BMC) and has not been reviewed or approved by Boston Medical Center (BMC).
-
Pay Growth & Progression — Recent union agreements delivered significant raises for nurses and many non‑RN groups, lifting pay levels in those cohorts. Feedback suggests these structured increases improved satisfaction for roles covered by the contracts.
-
Affordable Benefits — An option for a no‑premium medical plan, strong pharmacy discounts, and low‑cost same‑day care position healthcare as cost‑effective. Additional programs like diabetes support and coaching further reduce out‑of‑pocket burden.
-
Leave & Time Off Breadth — Full‑time staff receive a large PTO bank that grows over time and extended parental leave for birth or adoption. Colleagues also have access to emergency child and elder care supports and childcare discounts.
Boston Medical Center (BMC) Insights
What We Do
Boston Medical Center, located in Boston’s historic South End, is a private, not-for-profit, 567-bed, academic medical center and the primary teaching affiliate for Boston University School of Medicine. Recognized for its high-quality, nationally ranked and comprehensive medical care for the entire family, patients have access to the most current treatment and advancements at BMC. BMC physicians lead the way in pioneering new therapies that impact the care of patients locally and worldwide. In 2013, BMC made the decision to invest in a four-year campus redesign that includes additions to buildings, upgrades to existing structures, and an expansion of the Emergency Department. Once completed, the redesign will provide clinical workspaces with state-of-the-art facilities and equipment to solve BMC's most pressing care delivery needs. Already complete, the hospital’s Shapiro Center is Boston’s newest outpatient care facility and features a quarter-million square feet of clinic space, key support services, one of the region’s most technologically advanced pharmacies, and a bright, spacious café. Housed in a facility that provides world-class, patient-centered care at every visit, BMC doctors are among the best in their field. Many are recognized annually as “Top Doctors” in their medical and surgical specialties by publications such as U.S. News & World Report and Boston magazine. Boston Medical Center is also the largest safety net hospital in New England and extends into the community as a founding partner of Boston HealthNet, a network of 15 community health centers throughout Boston serving more than a quarter million people annually. No matter whom you meet at BMC, all are committed to providing every patient and family member with the highest quality of care, respect, warmth and compassion.
.jpg)
