Senior AI Security Systems Engineer — Trust & Attestation

EY; Hartford (CT); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards package

Competitive compensation & benefits

Job summary

EY is seeking AI Systems Engineers to own the security fabric of EY’s AI-native platform, overseeing identity, secrets, attestation, and cryptographic controls across cloud, on‑prem, edge, and air‑gapped environments.

You will drive platform-wide identity modeling, cryptographic lifecycle, and enforcement mechanisms ensuring workloads are trusted, verifiable, and auditable in regulated contexts.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on ownership.
• Deep, hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong grounding in PKI, X.509 lifecycle (cert-manager), key management, and transit encryption.
• Experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX, NVIDIA CC) and secure boot (Intel TXT).
• Experience delivering identity and secrets across multi-tenant, multi-environment platforms.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments and attestable, auditable systems.
• Define platform-wide identity model for all workloads and services.
• Manage cryptographic lifecycle: issuance, rotation, revocation, expiry.
• Enforce attestation policy for nodes, enclaves, workloads, and evidence capture.
• Collaborate with Enterprise Security, Cloud Platform, and SRE for audit readiness in regulated contexts.

Skills

Workload identity

Secrets management

PKI & cryptography

Confidential compute

Attestation & remote attestation

Education

Bachelor’s or Master’s degree in CS or related field

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

TDX/SEV-SNP/SGX/DOCA

Job description

EY is seeking AI Systems Engineers to own the security fabric of EY’s AI-native platform, overseeing identity, secrets, attestation, and cryptographic controls across cloud, on‑prem, edge, and air‑gapped environments.

You will drive platform-wide identity modeling, cryptographic lifecycle, and enforcement mechanisms ensuring workloads are trusted, verifiable, and auditable in regulated contexts.