AI Trust & Secure Execution Systems Engineer

EY; Tampa (FL); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards package

Paid time off

Job summary

EY in the United States seeks an AI Systems Engineer to own the security fabric for EY's AI-native platform, spanning identity, secrets, attestation, and cryptographic management across cloud, on-prem, edge, and air-gapped environments.

You will enforce workload trust, manage PKI lifecycles, and drive audit-ready governance with cross-team collaboration in a regulated context. EY emphasizes flexible work and comprehensive total rewards.

Qualifications

• Bachelor’s or Master’s degree in CS, Security, or related field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with production ownership.
• Hands-on with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong PKI and X.509 lifecycle, key management, and transit encryption.
• Experience with confidential compute and hardware attestation (TDX/SEV-SNP/SGX/NVIDIA DOCA) and secure boot (Intel TXT).
• Experience delivering identity/secrets across multi-tenant, multi-environment platforms.
• Proven track record operating under compliance/audit requirements.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments to ensure isolation and attestability.
• Define platform-wide identity model for workloads and services.
• Oversee cryptographic lifecycle: issuance, rotation, revocation, expiry.
• Enforce attestation policy for nodes, enclaves, and workloads.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Crypto lifecycle

Confidential compute

Attestation

Multi-environment

Communication

Auditability

Education

Bachelor’s or Master’s in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

TDX/SEV-SNP/SGX

NVIDIA DOCA

Job description

EY in the United States seeks an AI Systems Engineer to own the security fabric for EY's AI-native platform, spanning identity, secrets, attestation, and cryptographic management across cloud, on-prem, edge, and air-gapped environments.

You will enforce workload trust, manage PKI lifecycles, and drive audit-ready governance with cross-team collaboration in a regulated context. EY emphasizes flexible work and comprehensive total rewards.