Secure AI Systems Engineer — Trust & Attestation

EY; San Mateo (CA); On-site; USD 107,000 - 177,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plan

Paid time off

Job summary

EY seeks AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning identity, secrets, cryptography, and attestation. You will enforce trust, enable auditable deployments, and drive governance across cloud, on-prem, edge, and air-gapped environments.

You will partner with Enterprise Security, Cloud Platform, and SRE to ensure compliance and regulatory alignment while delivering secure, scalable trust across multi-tenant workloads.

Qualifications

• Bachelor’s or Master’s degree in CS, Security or related field or equivalent experience.
• 8+ years in security engineering, identity/PKI or trust infrastructure with production ownership.
• Hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID) and secrets management (OpenBao/Vault).
• Strong PKI knowledge and X.509 certificate lifecycle management.
• Experience with confidential compute and hardware attestation (TDX/SEV-SNP/SGX/NVIDIA CC) and secure boot.
• Experience delivering identity and secrets across multi-tenant, multi-environment platforms.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with trusted hardware.
• Establish platform-wide identity model for telemetry and policy enforcement.
• Own cryptographic lifecycle: certificates, keys, and roots rotation.
• Enforce attestation policy for nodes, enclaves, and workloads.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Cryptographic lifecycle

Confidential compute

Attestation and trust

Education

Bachelor’s or Master’s degree in Computer Science or Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

Vault

cert-manager

X.509 lifecycle

DOCA

Job description

EY seeks AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning identity, secrets, cryptography, and attestation. You will enforce trust, enable auditable deployments, and drive governance across cloud, on-prem, edge, and air-gapped environments.

You will partner with Enterprise Security, Cloud Platform, and SRE to ensure compliance and regulatory alignment while delivering secure, scalable trust across multi-tenant workloads.