Senior AI Security & Trust Engineer

Ernst & Young Oman; Rogers (AR); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package (medical/dental,

Job summary

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning identity, secrets, cryptography, and attestation across cloud, on-prem, edge, and air-gapped environments.

You will lead workload identity, secrets management, cryptographic lifecycle, and attestation policy, working with Enterprise Security, Cloud Platform, and SRE to ensure audit readiness in regulated client contexts.

Qualifications

• Bachelor's or Master's in CS, Security, or related field; or equivalent experience.
• 8+ years in security engineering, identity/PKI or trust infrastructure with production ownership.
• Hands-on expertise with workload identity and secrets management in multi-tenant environments.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments with attestation capabilities.
• Define platform-wide identity models for verifiable workload identities.
• Manage cryptographic lifecycle including certificates and keys across tenants.
• Enforce attestation policy and audit readiness for regulated contexts.
• Collaborate with Enterprise Security, Cloud Platform and SRE teams.

Skills

Workload identity

Secrets management

PKI

Cryptographic lifecycle

Confidential compute

Trusted execution environments

Auditability

Communication

Education

Bachelor's or Master's in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

X.509 lifecycle

DOCA/TEE technologies

Intel TXT

Job description

EY is seeking AI Systems Engineers to own the security and trust fabric of EY's AI-native platform, spanning identity, secrets, cryptography, and attestation across cloud, on-prem, edge, and air-gapped environments.

You will lead workload identity, secrets management, cryptographic lifecycle, and attestation policy, working with Enterprise Security, Cloud Platform, and SRE to ensure audit readiness in regulated client contexts.