AI Security Engineer — Trust & Attestation Platform

EY; Westlake Village (CA); On-site; USD 128,000 - 201,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

Paid time off

Job summary

EY in the United States seeks AI Systems Engineers to own the security and trust fabric of EY's AI-native platform across cloud, on‑prem, edge and air‑gapped environments. This role drives workload identity, secrets management, PKI and attestation, and builds confidential compute with audit-ready governance.

You will collaborate with Enterprise Security, Cloud Platform and SRE teams to ensure regulatory compliance and secure deployments at scale.

Qualifications

• Bachelor’s or Master’s degree in CS or related field.
• 8+ years in security engineering, identity/PKI, or trust infrastructure.
• Hands-on ownership of workloads identity (SPIRE/SPIFFE) and IAM (Keycloak/Entra ID).
• Strong PKI, X.509 lifecycle, key management, and transit encryption knowledge.
• Experience with confidential compute and hardware attestation (TDX/SEV-SNP/SGX).
• Experience delivering identity and secrets across multi-tenant environments.
• Proven ability to operate under compliance and audit requirements.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with attestation and auditability.
• Define platform identity models for telemetry, cost attribution and policy enforcement.
• Manage cryptographic lifecycle: issuance, rotation, revocation, expiry.
• Enforce attestation policy for trusted nodes, enclaves, and workloads.
• Collaborate with Enterprise Security / Cloud Platform / SRE for review and audit readiness.

Skills

workload identity

secrets management

PKI

cryptographic lifecycle

confidential computing

attestation

industrial compliance

cloud/on-prem/edge

Education

CS degree or above

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

TDX/SEV-SNP/SGX

Intel TXT

DOCA

Job description

EY in the United States seeks AI Systems Engineers to own the security and trust fabric of EY's AI-native platform across cloud, on‑prem, edge and air‑gapped environments. This role drives workload identity, secrets management, PKI and attestation, and builds confidential compute with audit-ready governance.

You will collaborate with Enterprise Security, Cloud Platform and SRE teams to ensure regulatory compliance and secure deployments at scale.