AI Systems Engineer - Secure Execution - Senior
Ernst and Young27 days ago
Base Salary
$107k - $201k/yr
Responsibilities
- Own workload identity and secrets management using SPIRE/ODIS, Keycloak/Entra ID, OpenBao, cert-manager, PKI issuers and roots, and transit encryption.
- Build confidential-compute environments using trusted execution environments, secure boot, hardware attestation, and secure DPU architectures.
- Define and enforce platform-wide identity, cryptographic lifecycle, and attestation policies across cloud, on-premises, edge, and air-gapped environments.
- Manage issuance, rotation, revocation, and expiration of certificates, keys, and trust roots while eliminating untracked and long-lived credentials.
- Capture audit-grade attestation and compliance evidence and ensure deployments are secure, economically bounded, and auditable.
- Partner with Enterprise Security, Cloud Platform, and SRE on trust standards, independent review, and regulatory readiness.
Requirements
- Bachelor’s or master’s degree in computer science, security, or a related technical field, or equivalent experience.
- At least 8 years of security engineering, identity/PKI, or trust infrastructure experience with hands-on production ownership.
- Deep production expertise with workload identity, SPIRE/SPIFFE, IAM, Keycloak/Entra ID, OpenBao/Vault, PKI, X.509 certificate lifecycle, key management, and transit encryption.
- Experience with confidential computing, trusted execution environments, hardware attestation, secure boot, and multi-environment identity and secrets delivery.
- Proven experience operating under compliance, security, or regulatory constraints with audit-grade evidence requirements.
- Ability to define ownership boundaries and consumption contracts with platform, data, and runtime teams.
- Preferred qualifications include secure DPU architecture experience with DOCA, hardware root-of-trust and boot-chain design, OPA and service-mesh integration, API gateway experience, confidential AI workload exposure, auditor-facing evidence production, relevant certifications such as CISSP, and regulated-industry experience.
Benefits
- Base salary is listed as $106,900–$176,500 for all US geographic locations and $128,400–$200,600 for New York City Metro Area, Washington State, and California excluding Sacramento.
- Medical and dental coverage, pension and 401(k) plans, paid holidays, winter and summer breaks, personal and family care leave, and other paid time off options.
- Flexible vacation policy and a flexible, team-led and leader-enabled hybrid model; most external client-serving roles are expected to work in person 40–60% of the time.
- EY provides a diverse, inclusive, globally connected work environment and reasonable accommodations for qualified individuals with disabilities.
Tech Stack
Vault
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.