Senior AI Security & Trust Engineer (Secrets & Attestation)

EY; Atlanta (GA); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Paid time off

Job summary

EY is seeking AI Systems Engineers to own the security and trust fabric of EY’s AI-native platform, spanning cloud, on‑prem, edge, and air‑gapped environments. You will manage workload identity, secrets, PKI, and attestation across diverse environments to enable compliant, auditable AI workloads.

The role emphasizes confidential compute, hardware roots of trust, and policy‑driven trust with a strong focus on auditability and regulatory alignment.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related technical field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands‑on production ownership.
• Deep, hands‑on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong grounding in PKI, X.509 certificate lifecycle (cert‑manager), key management, and transit encryption.

Responsibilities

• Own workload identity and secrets management across environments (SPIRE/ODIS, Keycloak/Entra ID, OpenBao, cert-manager).
• Build confidential compute environments (TEE, secure boot) so environments are isolated and audit-ready.
• Establish a platform‑wide identity model enabling verifiable identity across telemetry and policy enforcement.
• Own the cryptographic lifecycle: issuance, rotation, revocation, expiry with no long‑lived credentials.
• Enforce attestation policy across nodes, enclaves, and workloads with audit visibility.
• Partner with Enterprise Security/Cloud Platform/SRE for independent review and audit readiness.

Skills

Workload identity

Secrets management

PKI

Trusted execution

Attestation

Audit readiness

Education

Bachelor’s or Master’s degree in CS or related field

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

Job description

EY is seeking AI Systems Engineers to own the security and trust fabric of EY’s AI-native platform, spanning cloud, on‑prem, edge, and air‑gapped environments. You will manage workload identity, secrets, PKI, and attestation across diverse environments to enable compliant, auditable AI workloads.

The role emphasizes confidential compute, hardware roots of trust, and policy‑driven trust with a strong focus on auditability and regulatory alignment.