The AI Systems Engineer - Secure Execution role at EY focuses on ensuring the security and trust of the AI-native platform. This senior position involves managing workload identity, secrets, and cryptographic lifecycles to enable secure AI workloads in regulated environments. The engineer will work closely with various teams to establish a robust identity model and enforce security policies. This role is crucial for maintaining compliance and audit readiness across multiple deployment environments.

• Bachelor’s or Master’s degree in Computer Science, Security, or a related technical field, or equivalent experience.
• 8+ years in security engineering, identity/PKI, or trust infrastructure with hands-on production ownership.
• Deep, hands-on expertise with workload identity (SPIRE/SPIFFE), IAM (Keycloak/Entra ID), and secrets management (OpenBao/Vault).
• Strong grounding in PKI, X.509 certificate lifecycle (cert-manager), key management, and transit encryption.
• Working experience with confidential compute and hardware attestation (TDX, SEV-SNP, SGX, NVIDIA CC, or equivalents) and secure boot (Intel TXT).
• Proven track record operating under compliance, security, or regulatory constraints with audit-grade evidence requirements.

• Own workload identity and secrets management across every environment and tenant.
• Build confidential compute environments to ensure isolation, attestability, and audit readiness.
• Establish a platform-wide identity model for verifiable workload and service identities.
• Manage the cryptographic lifecycle including issuance, rotation, revocation, and expiry of certificates and keys.
• Enforce attestation policies to determine trusted nodes, enclaves, and workloads.
• Collaborate with Enterprise Security, Cloud Platform, and SRE teams to ensure compliance and audit readiness.

• Ernst & Young (EY) offers a comprehensive and competitive benefits package designed to support the well-being of its employees across various dimensions.