Senior AI Systems Engineer: Trust & Security for AI

EY; Palo Alto (CA); Hybrid; USD 128,000 - 201,000; Full time

Benefits offered by this job

Hybrid work model

Medical benefits

401(k) plans

Job summary

EY seeks an AI Systems Engineer to own security and trust of EY's AI-native platform, spanning identity, secrets, attestation, and crypto across cloud, on‑prem, edge and air‑gapped deployments.

You’ll collaborate with Enterprise Security, Cloud Platform, and SRE to enforce trust, auditability and regulated deployment protections, delivering a scalable, provable security model for agentic AI workloads.

Qualifications

• Degree or equivalent experience in CS/security.
• 8+ years of production security ownership.
• Hands-on with workload identity and secrets management.
• Strong PKI and X.509 lifecycle knowledge.
• Experience with confidential compute and hardware attestation.
• Ability to deliver identity/secret controls across multi-tenant environments.
• Proven ability to operate under audit/regulatory constraints.

Responsibilities

• Own workload identity and secrets management across environments.
• Build confidential compute environments and attestation capabilities.
• Establish a platform-wide identity model for workloads and services.
• Oversee cryptographic lifecycle: certificates, keys, roots, rotation.
• Enforce attestation policy for nodes and enclaves.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Cryptographic lifecycle

Trust and attestation

Confidential compute

Multi-environment gates

Security governance

Education

Bachelor’s or Master’s degree in Computer Science or Security

8+ years in security engineering or trust infrastructure

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

DOCA/TEE tech

Job description

EY seeks an AI Systems Engineer to own security and trust of EY's AI-native platform, spanning identity, secrets, attestation, and crypto across cloud, on‑prem, edge and air‑gapped deployments.

You’ll collaborate with Enterprise Security, Cloud Platform, and SRE to enforce trust, auditability and regulated deployment protections, delivering a scalable, provable security model for agentic AI workloads.