AI Trust & Secure Execution Systems Engineer

EY; Cincinnati (OH); On-site; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid/remote work possible

Total rewards package

Paid time off

Job summary

EY is seeking AI Systems Engineers to own the security fabric for EY’s AI-native platform, spanning identity, secrets, attestation, and PKI across cloud, on‑prem, edge, and air‑gapped environments. You will enforce trust, enable auditable workloads, and partner with security teams to meet regulatory standards.

Ideal candidates have deep production experience with workload identity, confidential compute, and cryptographic lifecycle, and are comfortable operating across multiple environments with

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on ownership.
• Deep hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong PKI knowledge and X.509 lifecycle, key management, and transit encryption.
• Experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX) and secure boot.

Responsibilities

• Own workload identity and secrets management across environments; ensure consistent trust propagation.
• Build confidential compute environments and secure boot architectures for audit-ready deployments.
• Define platform-wide identity models and attestable trust across cloud, on‑prem, edge, and air‑gapped zones.
• Enforce cryptographic lifecycle, from issuance to rotation and revocation, with zero credential sprawl.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness in regulated contexts.

Skills

Workload identity

Secrets management

PKI

Attestation

Confidential compute

Security engineering

Identity/attestation across multi‑env

Education

CS/Security degree

Tools

SPIRE

SPIFFE

Keycloak

Entra ID

OpenBao

Job description

EY is seeking AI Systems Engineers to own the security fabric for EY’s AI-native platform, spanning identity, secrets, attestation, and PKI across cloud, on‑prem, edge, and air‑gapped environments. You will enforce trust, enable auditable workloads, and partner with security teams to meet regulatory standards.

Ideal candidates have deep production experience with workload identity, confidential compute, and cryptographic lifecycle, and are comfortable operating across multiple environments with