AI Security Engineer: Trust, Identities & Attestation

EY; Denver (CO); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards including health/dental,

Generous vacation policy

Job summary

EY in the United States invites AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning identity, secrets, cryptography and attestation. You will ensure workloads are identity-bound, secrets protected, nodes trusted, and deployments auditable across cloud, on‑prem, edge and air‑gapped environments.

Join EY to shape a regulated, auditable platform; collaborate with security, cloud, and SRE teams, and deliver enterprise-ready trust controls with a focus on

Qualifications

• Hands-on expertise with workload identity, IAM, and secrets management at scale.
• Strong understanding of confidential compute and attestation technologies.
• Experience delivering secure, auditable systems under compliance constraints.
• Ability to define ownership boundaries across platform, data, and runtime teams.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments and secure boot workflows.
• Standardize platform-wide identity models and telemetry flows.
• Manage cryptographic lifecycle including certificates and keys.
• Enforce attestation policies and audit trails.
• Collaborate with Enterprise Security, Cloud Platform and SRE.

Skills

Workload identity

Secrets management

PKI

Confidential compute

Attestation

Auditability

Cloud/on-prem/edge

Education

Bachelor's or Master in CS/Security or related, or equivalent

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

X.509 lifecycle

DOCA/TDX/SEV-SNP

Intel TXT

Job description

EY in the United States invites AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning identity, secrets, cryptography and attestation. You will ensure workloads are identity-bound, secrets protected, nodes trusted, and deployments auditable across cloud, on‑prem, edge and air‑gapped environments.

Join EY to shape a regulated, auditable platform; collaborate with security, cloud, and SRE teams, and deliver enterprise-ready trust controls with a focus on