Senior AI Security Systems Engineer - Trust & Attestation

EY; San Jose (CA); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY seeks AI Systems Engineers to own the security and trust fabric of EY’s AI-native platform. You will enforce identity, secrets, attestation, and cryptographic controls across cloud, on‑prem, edge, and air‑gapped environments.

You will liaise with Enterprise Security, Cloud Platform, and SRE to ensure audit readiness and regulatory compliance while enabling secure, scalable AI workloads in highly regulated industries.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field.
• 8+ years in security engineering, identity/PKI, or trust infrastructure.
• Hands-on production ownership with workload identity and secrets management.
• Deep PKI and X.509 lifecycle expertise.
• Experience with confidential compute and hardware attestation.
• Proven ability to operate in multi-tenant, multi-environment platforms.
• Ability to deliver audit-grade evidence under regulatory constraints.
• Ability to define clear ownership boundaries with platform teams.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with TEEs and secure boot.
• Define platform-wide identity model to propagate identity through telemetry and policy.
• Manage cryptographic lifecycle: certificates, keys, roots, and revocation.
• Enforce attestation policy for trusted nodes and workloads.
• Coordinate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity management

Secrets management

PKI

Confidential compute

Attestation

Cross-environment deployment

Communication

Education

Bachelor’s or Master’s in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

TDX/SEV-SNP/SGX

Job description

EY seeks AI Systems Engineers to own the security and trust fabric of EY’s AI-native platform. You will enforce identity, secrets, attestation, and cryptographic controls across cloud, on‑prem, edge, and air‑gapped environments.

You will liaise with Enterprise Security, Cloud Platform, and SRE to ensure audit readiness and regulatory compliance while enabling secure, scalable AI workloads in highly regulated industries.