AI Systems Engineer – Secure Execution & Trust

EY; Birmingham (AL); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY seeks an AI Systems Engineer to own security and trust across EY's AI-native platform, spanning identity, secrets, cryptography and attestation in cloud, on-prem, edge, and air-gapped environments.

You will ensure workload identity binds to workloads, protect secrets, and enable auditable deployments with enterprise security alignment. Strong PKI, confidential compute, and attestation expertise are essential.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related technical field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure, with hands-on production ownership.
• Deep, hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong grounding in PKI, X.509 certificate lifecycle (cert-manager), key management, and transit encryption.
• Working experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX, NVIDIA CC, or equivalents) and secure boot (Intel TXT).
• Experience delivering identity and secrets consistently across multi-tenant, multi-environment platforms.
• Proven track record operating under compliance, security, or regulatory constraints with audit-grade evidence requirements.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments to isolate and attest workloads.
• Establish a platform-wide identity model for telemetry, cost attribution and policy enforcement.
• Own cryptographic lifecycle including issuance, rotation, and revocation.
• Enforce attestation policy for nodes, enclaves, and workloads with auditability.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Confidential compute

Attestation

Audit readiness

Cross-environment

Security governance

Communication

Regulatory compliance

Education

Bachelor’s or Master’s in CS/Security

Tools

SPIRE

SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

TDX/SEV-SNP/SGX

DOCA

Job description

EY seeks an AI Systems Engineer to own security and trust across EY's AI-native platform, spanning identity, secrets, cryptography and attestation in cloud, on-prem, edge, and air-gapped environments.

You will ensure workload identity binds to workloads, protect secrets, and enable auditable deployments with enterprise security alignment. Strong PKI, confidential compute, and attestation expertise are essential.