Paylocity is an award-winning provider of cloud-based HR and payroll software solutions, offering the most complete platform for the modern workforce. The company has become one of the fastest-growing HCM software providers worldwide by offering an intuitive, easy-to-use product suite that helps businesses automate and streamline HR and payroll processes, attract and retain talent, and build a strong workplace culture.

While traditional HR and payroll providers automate basic HR processes such as payroll and benefits administration, Paylocity goes further by developing tools that HR and businesses need to compete for talent and deliver against the expectations of the modern workforce.

We give our employees what they need to succeed, including great benefits and perks! We offer medical, dental, vision, life, disability, and a 401(k) match, as well as perks that support you, your family, and your finances. And if it’s career development you desire, we provide that, too! At Paylocity, people matter most and have always been at the heart of our business.

Help Paylocity enhance communication and enable employees to connect, collaborate, and create from anywhere with a position in Product & Technology!

Want to develop the strategies and principles needed to deliver compelling software? Join our team and help us enhance our all-in-one software platform, elevate our one-of-a-kind technology, and improve the employee experience.

Take your career to the next level at one of G2's Top 100 Software Companies. Explore our Product & Technology positions to see where you fit!

This is a fully remote position, allowing you to work from home or location of record within the U.S. with no in-office requirements. You must be available five days per week during designated work hours. The work arrangement for this role is subject to change based on business needs and individual performance. This may include adjustments to on-site requirements or schedule expectations, as necessary.

Senior Security Architect (AI)

Position Overview

The Senior AI Security Architect is a forward-looking, technical role within Paylocity's Information Security organization, responsible for defining how AI and Machine Learning systems are securely designed, deployed, and governed across the enterprise and the Paylocity product portfolio. As a senior member of the Information Security team, you will serve as a trusted advisor and subject matter expert on AI/ML security, collaborating with cross-functional partners across Product & Technology (P&T), Data Science, Procurement, Enterprise Applications, Legal, and Privacy to embed security and trust into every layer of Paylocity's AI ecosystem.

This is a hands-on, high-visibility role in a fast-paced, SaaS-based, and innovation-driven environment. You will hold a permanent seat on the AI Governance Committee (AIGC) as the security and compliance Subject Matter Expert (SME), and you will represent AI security considerations on the Architecture Review Board (ARB) to ensure security is baked in by design. The ideal candidate is a self-starter with deep technical expertise in AI/ML security, strong communication skills, and a passion for building secure, scalable, and responsible AI systems that protect Paylocity's clients, employees, and data.

Primary Responsibilities

The Senior AI Security Architect is accountable for maintaining the confidentiality, integrity, and availability of Paylocity's AI/ML platforms, models, data pipelines, and the broader systems and data they connect. This includes leading to the development of secure AI architectural patterns, evaluating AI-specific technical risks, and partnering with engineering, product, and data science teams to implement effective security controls across the AI lifecycle.

Key Responsibilities

AI Security Governance: Serve as a critical member of Paylocity's AI Governance Committee (AIGC), acting as the information security and compliance SME for all AI use case reviews, baseline control definitions, risk trigger evaluations, and escalation decisions across product and corporate AI initiatives.

AI Risk Assessment Frameworks: Develop, mature, and operationalize frameworks and risk assessment instruments (intake flows/tools, scoring logic, control mapping, and assessment automation) that enable Paylocity to evaluate AI security risk consistently and at scale across hundreds of use cases.

Architecture Review Board Representation: Serve as the AI security voice on the Architecture Review Board (ARB), reviewing proposed architectural changes, new AI technologies, RAG patterns, agentic workflows, Agent-to-agent workflows, MCP integrations, and model deployments to ensure AI security considerations are embedded in every design decision.

AI Threat Modeling & Secure Design Patterns: Lead threat modeling for AI/ML workloads, proactively identifying AI-specific vulnerabilities such as prompt injection, data poisoning, model theft, model inversion, training data leakage, and adversarial attacks; translate findings into reusable secure design patterns and reference architectures for LLMs, RAG architectures, and Agentic AI workflows.

AI Security Tooling Strategy: Lead the evaluation, pilot, and review of new AI security tooling (e.g., LLM firewalls, prompt injection defenses, model security testing, AI-SPM, AI red-teaming platforms, AI-BOM), partnering with Procurement, Legal, and engineering to operationalize selected tooling into Paylocity's control stack.

Product & Corporate AI Use Case Evaluation: Lead security reviews and architectural guidance for AI use cases across both the product security space (e.g., AI Assistant, Recruiting AI, Resume Parsing, Recognition & Rewards, Time Series Forecasting, Content Moderation) and the corporate security space (e.g., Claude Code, GitHub Copilot, internal AI productivity tools, Shadow AI remediation).

SDLC Integration: Enhance AI security guardrails into Paylocity's Product Development Lifecycle (PDLC)—including Vision, Design, and Planning phases—ensuring AI security criteria are baked into Definition of Ready/Definition of Done, prompt injection guardrails are defined early, and pen testing and red-teaming are scheduled in the planning stage.

Hardened AI Cloud Workloads: Partner with Cloud Center of Excellence (CCOE), application teams and DevSecOps to deliver hardened, pre-tested cloud AI infrastructure patterns (Snowflake access models, Azure OpenAI, AWS Bedrock/SageMaker, GCP Vertex AI) that reduce vulnerabilities and provide engineering teams with a secure foundation for AI development.

Compliance & Regulatory Alignment: Ensure Paylocity's AI capabilities are aligned with relevant regulatory and industry frameworks including NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, MITRE ATLAS, SOC 1/SOC 2, GDPR, CCPA, and applicable state AI regulations, partnering with GRC, Privacy, and Legal teams on audit readiness and evidence generation.

Executive Communication: Translate complex AI security risks, trends, and architectural decisions into clear, executive-ready narratives for the CISO, CIO, AIGC, Architecture Review Board, and Board-level reporting.

Other Responsibilities

As a senior architect within the Information Security organization, you will also occasionally serve as a technical architect across traditional security domains, supporting Paylocity's broader security strategy and partnering with the following teams as needed:

Product Security: Where necessary, partner with the Product Security function on secure design reviews, WAF strat