Job Description
Summary
The Apple Service Engineering (ASE) team builds and provides systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, and Maps). We are the foundation on which Apple’s software developers build the products that our customers love. Our services have to scale globally, stay highly available, and "just work.” If you love designing, engineering and running systems and infrastructure that will help millions of customers, then this is the place for you!
We are looking for a passionate and talented Senior Software Engineer who will focus on creating fundamental security services, addressing identity and authorization challenges on a large scale within the ASE organization. Success in this role requires individuals to possess a blend of profound technical expertise, extensive knowledge in security, and substantial experience in large-scale operations.
Description
Key Qualifications
- Strong programming skills in Golang, as you'll be working extensively with Go-based applications
- Proven experience with large scale, highly available, distributed, and fault tolerant systems
- Excellent understanding of operating systems concepts including multi-threading, memory management, networking and storage, performance and scale
- Experience with Kubernetes, Docker, and containerization (CNCF Kubernetes Developer or equivalent)
- Knowledge of cryptographic algorithms and protocols for securing data, including TLS/SSL, digital signatures, hashing, and encryption
- Knowledge of authentication and authorization mechanisms, including OAuth, JWT, and other identity management protocols
- Knowledge of securing APIs, including input validation, authentication, and authorization mechanisms for RESTful and gRPC APIs
- Hands-on experience with Systems, including the ability to configure and troubleshoot system initialization processes
- Proficiency in macOS system administration, with a focus on Launchd, the init and service management framework
- Understanding of network security principles, protocols, and technologies, including firewalls, VPNs, and secure communication channels
- Familiarity with incident response processes and the ability to respond to security incidents effectively
Education & Experience
operations experience in a large-scale environment)
- Prior experience in security related fields (or equivalent experience) Certs like OSCP, OSCE,
OSEE, etc. helpful but not vital. Bonus points for community contributions like public CVEs, bug
bounty recognition, open source tools, blogs, etc.