AI Systems Engineer: Secure Identity & Attestation

EY; Columbus (OH); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Competitive compensation

401(k) and pension

Paid time off

Medical and dental coverage

Job summary

EY is seeking an AI Systems Engineer to own the security and trust fabric of EY's AI-native platform across cloud, on-prem, edge and air-gapped environments. This role drives identity, secrets, PKI and attestation to enable auditable, secure AI workloads in regulated contexts.

Join EY's team in a hybrid model to help build a better working world while ensuring enterprise trust across diverse environments.

Qualifications

• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on ownership.
• Deep hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets (OpenBao/Vault).
• Strong PKI and X.509 lifecycle knowledge (cert-manager), key management and transit encryption.
• Experience with confidential compute and hardware attestation (TDX/SEV-SNP/SGX/NVIDIA CC) and secure boot (Intel TXT).
• Experience delivering identity and secrets across multi-tenant, multi-environment platforms.
• Proven track record operating under compliance/audit constraints with audit-grade evidence.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments to ensure isolation and audit-readiness.
• Establish platform-wide identity model for telemetry, cost attribution, and policy enforcement.
• Own cryptographic lifecycle: certificates and keys with zero manual secret sprawl.
• Enforce attestation policy and capture evidence for audits.
• Collaborate with Enterprise Security / Cloud Platform / SRE to ensure audit readiness in regulated contexts.

Skills

Workload identity

Secrets management

PKI

Crypto lifecycle

Confidential compute

Attestation

Compliance mindset

Education

Bachelor’s or Master’s degree in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

TDX/SEV-SNP/SGX/NVIDIA CC

Intel TXT

DOCA

Job description

EY is seeking an AI Systems Engineer to own the security and trust fabric of EY's AI-native platform across cloud, on-prem, edge and air-gapped environments. This role drives identity, secrets, PKI and attestation to enable auditable, secure AI workloads in regulated contexts.

Join EY's team in a hybrid model to help build a better working world while ensuring enterprise trust across diverse environments.