Senior AI Security Systems Engineer - Trust & Attestation

EY; Orlando (FL); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Job summary

EY is seeking an AI Systems Engineer to own the security and trust fabric of EY’s AI-native platform, spanning identity, secrets, cryptographic, and attestation layers across cloud, on-prem, edge, and air-gapped environments.

The role enforces trust, supports regulated client contexts, and partners with Enterprise Security, Cloud Platform and SRE to ensure audit readiness and compliant deployments. EY offers a hybrid model with in-person collaboration as needed.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on ownership.
• Hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong PKI knowledge and X.509 lifecycle management (cert-manager).
• Experience with confidential compute and hardware attestation (TDX/SEV-SNP/SGX) and secure boot (Intel TXT).
• Experience delivering identity and secrets across multi-tenant, multi-environment platforms.
• Proven track record in compliant, audit-focused environments.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with trusted hardware features.
• Establish platform-wide identity model for telemetry, cost attribution, and policy enforcement.
• Manage issuance, rotation, revocation, and expiry of certificates and keys.
• Enforce attestation policy for trusted nodes and workloads across boots and runtime.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Cryptographic lifecycle

Confidential compute

Attestation

Hardware root of trust

Remote attestation

Audit readiness

Security governance

Cross-functional collaboration

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

DOCA

Intel TXT

NVIDIA CC

Job description

EY is seeking an AI Systems Engineer to own the security and trust fabric of EY’s AI-native platform, spanning identity, secrets, cryptographic, and attestation layers across cloud, on-prem, edge, and air-gapped environments.

The role enforces trust, supports regulated client contexts, and partners with Enterprise Security, Cloud Platform and SRE to ensure audit readiness and compliant deployments. EY offers a hybrid model with in-person collaboration as needed.