Senior AI Security Engineer – Trust & Attestation

EY; Indianapolis (IN); On-site; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Medical & dental coverage

Pension & 401(k)

Paid time off

Job summary

EY seeks an AI Systems Engineer to own the security and trust fabric of EY’s AI-native platform, governing identity, secrets, cryptographic lifecycle, and attestation across cloud, on-prem, edge, and air-gapped environments. The role drives enforcement mechanisms to prove workloads are identity-bound, secrets protected, and deployments auditable.

This is a strategic differentiator enabling regulated workload deployment and governance, with cross-team collaboration and a focus on auditability and

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on production ownership.
• Deep hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong grounding in PKI, X.509 certificate lifecycle (cert-manager), key management, and transit encryption.
• Experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX, NVIDIA CC) and secure boot (Intel TXT).
• Experience delivering identity and secrets across multi-tenant, multi-environment platforms.
• Proven track record operating under compliance with audit-grade evidence requirements.
• Ability to define ownership boundaries and consumption contracts with platform, data, and runtime teams.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with attestation-ready security.
• Establish the platform-wide identity model for telemetry and policy enforcement.
• Own the cryptographic lifecycle: issuance, rotation, revocation, expiry.
• Enforce attestation policy and audit-ready evidence.
• Partner with security, cloud, and SRE for audit readiness in regulated contexts.

Skills

Workload identity & secrets

PKI

Confidential compute

Attestation & auditability

Cross-environment IAM

Security governance

Communication to stakeholders

Education

Bachelor’s or Master’s degree in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

TDX/SEV-SNP/SGX/TrustZone

Intel TXT

Job description

EY seeks an AI Systems Engineer to own the security and trust fabric of EY’s AI-native platform, governing identity, secrets, cryptographic lifecycle, and attestation across cloud, on-prem, edge, and air-gapped environments. The role drives enforcement mechanisms to prove workloads are identity-bound, secrets protected, and deployments auditable.

This is a strategic differentiator enabling regulated workload deployment and governance, with cross-team collaboration and a focus on auditability and