AI Systems Engineer: Secure Execution & Identity Trust

EY; Austin (TX); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Flexible vacation policy

Competitive compensation

Job summary

EY seeks AI Systems Engineers to own the security and trust fabric for EY's AI-native platform, covering identity, secrets, cryptography, and attestation. The role enforces protection and auditability across cloud, on-prem, edge, and air-gapped environments.

The position focuses on a platform-wide identity model, cryptographic lifecycle, and attestation policy to prove workloads are trusted and compliant in regulated industries.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field, or equivalent experience.
• 8+ years in security engineering or trust infrastructure with hands-on production ownership.
• Hands-on expertise with workload identity and secrets management across multi-tenant environments.

Responsibilities

• Own workload identity and secrets management across environments (SPIRE/ODIS, Keycloak/Entra ID, OpenBao).
• Build confidential compute environments with TEE and secure boot architectures.
• Define platform-wide identity model for verifiable identity across telemetry and policy enforcement.
• Manage cryptographic lifecycle: certificates, keys, and roots with zero manual secrets.
• Enforce attestation policy for trusted nodes and workloads with audit evidence.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness in regulated contexts.

Skills

Workload identity

IAM

Secrets management

Cryptographic lifecycle

Security engineering

Education

Bachelor’s or Master’s degree

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

attestation hardware

Job description

EY seeks AI Systems Engineers to own the security and trust fabric for EY's AI-native platform, covering identity, secrets, cryptography, and attestation. The role enforces protection and auditability across cloud, on-prem, edge, and air-gapped environments.

The position focuses on a platform-wide identity model, cryptographic lifecycle, and attestation policy to prove workloads are trusted and compliant in regulated industries.