Senior AI Security & Trust Systems Engineer

Ernst & Young Oman; Miami (FL); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total rewards package

Paid time off

Job summary

EY seeks AI Systems Engineers to own the security and trust fabric of EY's AI-native platform across cloud, on-prem, edge, and air-gapped environments. You will enforce identity, secrets handling, and attestation to ensure workloads are secure and auditable.

You'll collaborate with Enterprise Security, Cloud Platform, and SRE to meet enterprise trust standards and regulatory requirements in regulated client contexts, delivering evidence-backed security controls.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Security, or related field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on production ownership.
• Hands-on expertise with workload identity and secrets management at scale across environments.
• Strong grounding in PKI and X.509 lifecycle management.
• Experience with confidential compute and hardware attestation and secure boot.
• Proven ability to deliver identity and secrets across multi-tenant platforms.
• Experience operating under compliance and audit requirements.
• Ability to define ownership boundaries and consumption contracts.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments to enable attestation and auditability.
• Establish platform-wide identity model for verifiable, propagated identity.
• Oversee cryptographic lifecycle including certificate and key management.
• Enforce attestation policy for trusted nodes and workloads.
• Collaborate with Enterprise Security and SRE for audit readiness in regulated contexts.

Skills

Workload identity

Secrets management

PKI

Cryptographic lifecycle

Confidential compute

Attestation

Secure boot

Hardware root of trust

Cross-env governance

Cloud/on-prem/edge

Education

Bachelor’s or Master’s in CS/Security

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

Job description

EY seeks AI Systems Engineers to own the security and trust fabric of EY's AI-native platform across cloud, on-prem, edge, and air-gapped environments. You will enforce identity, secrets handling, and attestation to ensure workloads are secure and auditable.

You'll collaborate with Enterprise Security, Cloud Platform, and SRE to meet enterprise trust standards and regulatory requirements in regulated client contexts, delivering evidence-backed security controls.