Senior AI Trust & Secure Execution Engineer

EY; Kansas City (MO); Hybrid; USD 107,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package (medical, dental

401(k) and paid time off

Job summary

EY seeks AI Systems Engineers to own the security fabric of EY’s AI-native platform, ensuring workload identity, secrets protection, and trusted, attestable deployments across cloud, on-prem, edge, and air-gapped environments.

You will drive platform-wide identity models, cryptographic lifecycle management, and attestation policies, partnering with security, cloud, and SRE teams to meet regulatory audit requirements.

Qualifications

• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on ownership.
• Experience with workload identity and secrets management across multi-tenant environments.
• Strong background in PKI, X.509 lifecycles, and transit encryption.
• Hands-on with confidential compute hardware attestation and secure boot.
• History delivering identity and secrets across cloud/on-prem/edge/air-gapped platforms.
• Experience under regulatory constraints with audit-grade evidence.
• Ability to define ownership boundaries and contracts with platform teams.

Responsibilities

• Own workload identity and secrets management across multiple environments.
• Build confidential compute environments with attestation and audit readiness.
• Establish platform-wide identity model for telemetry, cost attribution, and policy enforcement.
• Oversee cryptographic lifecycle: issuance, rotation, revocation, expiry.
• Enforce attestation policy for nodes, enclaves, and workloads.
• Collaborate with Enterprise Security / Cloud Platform / SRE for audit readiness.

Skills

Workload identity

Secrets management

PKI

Confidential compute

Attestation

Cloud/on-prem/edge

Security audit readiness

Threat modeling

Education

Bachelor’s or Master’s degree in Computer Science, Security, or related field

Tools

SPIRE/SPIFFE

Keycloak/Entra ID

OpenBao/Vault

cert-manager

PKI/Certificate lifecycle

TDX/SEV-SNP/SGX/TrustZone

DOCA

OPA / policy engines

Job description

EY seeks AI Systems Engineers to own the security fabric of EY’s AI-native platform, ensuring workload identity, secrets protection, and trusted, attestable deployments across cloud, on-prem, edge, and air-gapped environments.

You will drive platform-wide identity models, cryptographic lifecycle management, and attestation policies, partnering with security, cloud, and SRE teams to meet regulatory audit requirements.