AI Security Engineer: Trust, Attestation & Secrets

EY; Detroit (MI); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Paid time off

Total Rewards package: health/dental,

Job summary

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform across cloud, on‑prem, edge and air‑gapped environments. You will enforce identity, secrets, attestation, and PKI controls to prove workloads are trusted and auditable.

In a hybrid, client-facing role, you will collaborate with security, platform and SRE teams to deliver scalable, compliant security capabilities for regulated workloads with audit-ready evidence.

Qualifications

• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on production ownership.
• Bachelor’s or Master’s degree in Computer Science, Security, or related field, or equivalent experience.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with trusted execution and secure boot concepts.
• Establish platform-wide identity model for verifiable enterprise trust across telemetry and cost attribution.
• Own cryptographic lifecycle including certificates, keys, and roots with strict rotation and revocation.
• Enforce attestation policy for nodes, enclaves, and workloads with audit-focused evidence.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness in regulated contexts.

Skills

Workload identity

Secrets management

PKI

Confidential compute

Education

Bachelor’s or Master’s degree in Computer Science or Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

Job description

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform across cloud, on‑prem, edge and air‑gapped environments. You will enforce identity, secrets, attestation, and PKI controls to prove workloads are trusted and auditable.

In a hybrid, client-facing role, you will collaborate with security, platform and SRE teams to deliver scalable, compliant security capabilities for regulated workloads with audit-ready evidence.