AI Systems Engineer: Secure Execution & Trust

EY; Jacksonville (FL); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

401(k) / pension and generous PTO

Job summary

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning cloud, on-prem, edge, and air-gapped environments. You will own workload identity, secrets, PKI, and attestation to prove trust and audit readiness across tenants.

The role integrates with security governance and compliance teams and requires deep experience with confidential compute and multi-tenant deployments. EY offers hybrid work in a flexible, inclusive culture across the US.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field or equivalent experience.
• 8+ years in security engineering, identity or trust infrastructure with hands-on ownership.
• Hands-on expertise with workload identity, IAM, and secrets management across environments.
• Strong PKI knowledge and X.509 lifecycle management.
• Experience with confidential compute and hardware attestation.
• Proven ability to deliver identity and secrets across multi-tenant platforms.
• Compliance-driven with audit-grade evidence requirements.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments to support attestation and auditability.
• Define platform-wide identity models and verifiable trust across workloads and services.
• Manage cryptographic lifecycle: certificates, keys, and roots with rotation.
• Enforce attestation policies for nodes and enclaves, with audit-ready evidence.
• Collaborate with Enterprise Security / Cloud Platform / SRE for governance and reviews.

Skills

Workload identity

Secrets management

PKI

Confidential compute

Attestation

Auditability

Cross-environment

Education

Bachelor’s or Master’s in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

TDX/SEV-SNP/SGX

NVIDIA DOCA

Job description

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning cloud, on-prem, edge, and air-gapped environments. You will own workload identity, secrets, PKI, and attestation to prove trust and audit readiness across tenants.

The role integrates with security governance and compliance teams and requires deep experience with confidential compute and multi-tenant deployments. EY offers hybrid work in a flexible, inclusive culture across the US.