Senior AI Security & Trust Engineer

EY; Tulsa (OK); On-site; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid/Remote flexible work options

Total Rewards package

Medical and dental coverage

Paid time off

Job summary

EY seeks AI Systems Engineers to own the security and trust fabric of EY’s AI-native platform across cloud, on‑prem, edge, and air‑gapped environments. You will design and enforce identity, secrets, attestation, and cryptographic controls to prove workloads are trusted and auditable.

Collaborate with Enterprise Security, Cloud Platform, and SRE to deliver audit-ready, compliant infrastructure for regulated client contexts while enabling secure AI deployments at scale.

Qualifications

• Bachelor’s or Master’s degree in CS, Security, or related field.
• 8+ years in security engineering, identity/PKI, or trust infrastructure.
• Hands-on with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets (OpenBao/Vault).
• Strong PKI and X.509 certificate lifecycle experience.
• Experience with confidential compute and hardware attestation (TDX, SEV‑SNP, SGX, NVIDIA CC, or equivalents) and secure boot (Intel TXT).
• Experience delivering identity and secrets across multi‑tenant environments.
• Proven track record under compliance with audit‑grade evidence requirements.
• Ability to define ownership boundaries with platform, data, and runtime teams.

Responsibilities

• Own workload identity and secrets management across IAM and secrets stores.
• Build confidential compute environments with TEEs and secure boot.
• Establish platform-wide identity model for verifiable identity across telemetry and policy.
• Own cryptographic lifecycle: certificates, keys, and roots rotation.
• Enforce attestation policy for trusted nodes and workloads and capture evidence.
• Collaborate with Enterprise Security, Cloud Platform, and SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Cryptographic lifecycle

Confidential compute

Attestation

Auditability

Multi‑environment ops

Security strategy

Communication

Education

Bachelor's or Master’s degree in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao

cert-manager

TDX/SEV‑SNP/SGX

Intel TXT

NVIDIA DOCA

service mesh

OPA

API gateways

Job description

EY seeks AI Systems Engineers to own the security and trust fabric of EY’s AI-native platform across cloud, on‑prem, edge, and air‑gapped environments. You will design and enforce identity, secrets, attestation, and cryptographic controls to prove workloads are trusted and auditable.

Collaborate with Enterprise Security, Cloud Platform, and SRE to deliver audit-ready, compliant infrastructure for regulated client contexts while enabling secure AI deployments at scale.