AI Security Platform Engineer: Trust & Attestation

Ernst & Young Oman; Little Rock (AR); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Paid time off

Job summary

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, including identity, secrets, cryptographic, and attestation layers across cloud, on-prem, edge, and air-gapped environments.

You'll enforce attestation, manage workload identity and secrets, and coordinate with Enterprise Security, Cloud Platform, and SRE to ensure audit readiness in regulated client contexts.

Qualifications

• Bachelor's or Master's degree in CS, Security, or related field.
• 8+ years in security engineering, identity/trust infra.
• Hands-on with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets (OpenBao/Vault).
• Strong PKI, X.509 lifecycle (cert-manager), key management, and transit encryption.
• Experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX, NVIDIA CC) and secure boot (Intel TXT).
• Experience delivering identity/secrets across multi-tenant, multi-environment platforms.
• Proven track record under compliance/audit constraints with evidence requirements.
• Ability to define ownership boundaries with platform, data, and runtime teams.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with TEE and secure DPU architectures.
• Establish platform-wide identity model for verifiable workloads.
• Own cryptographic lifecycle: issuance, rotation, revocation, expiry.
• Enforce attestation policy for nodes/enclaves/workloads.
• Partner with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

workload identity

secrets management

PKI

cryptographic lifecycle

confidential compute

hardware trust

attestation

cloud/on-prem/edge

Education

Bachelor's or Master's in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

Job description

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, including identity, secrets, cryptographic, and attestation layers across cloud, on-prem, edge, and air-gapped environments.

You'll enforce attestation, manage workload identity and secrets, and coordinate with Enterprise Security, Cloud Platform, and SRE to ensure audit readiness in regulated client contexts.