Senior Security Site Reliability Engineer - Apple Service Engineering
A Security Site Reliability Engineer joins Apple Service Engineering's new SRE team to run and scale foundational security services (host access, disk encryption, identity/authentication) in partnership with the security dev team. Day-to-day work spans 24/7 Tier 1 service operations, security baselines, incident response, and automation, using Linux security, containers/Kubernetes, and languages l
- Compensation
- Not disclosed
- Location
- Seattle
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 7+ years
- Category
- Sre
- Posted
Skills
Must have
- Bachelor's Degree in Computer Science, an engineering-related field, or equivalent related experience
- 10+ years in a Site Reliability Engineering infrastructure focused role
- Significant and demonstrable experience in at least one of: Python, Golang, Java, Rust, C# or C++
- Deep knowledge of Linux security primitives, systems, packaging, container security and SELinux
- Strong understanding of operating systems concepts including multi-threading, memory management, networking and storage, performance and scale
- Experience running Tier 1 services for 24/7 support
Nice to have
- Advanced Degree
- Proven experience with large scale, highly available, distributed, and fault tolerant systems
- Experience with Kubernetes, Docker, and containerization
- Understanding of SRE principles, including monitoring, alerting, error budgets, fault analysis, and other common reliability engineering concepts
- Understanding of MacOS security primitives
- Prior experience in security related fields (or equivalent experience); certs like OSCP, OSCE, OSEE helpful but not vital
Full description
People at Apple don't just build products, they craft the kind of experiences that have revolutionized entire industries. The diverse collection of our people and their ideas inspire innovation in everything we do. Imagine what you could do here. Join Apple, and help us leave the world better than we found it. The Apple Service Engineering (ASE) team builds and provides the systems and infrastructure that fuel Apple's services, including iCloud, iTunes, Siri, and Maps. We are the foundation on which Apple's software developers build the products our customers love.
We are looking for a Sr. Site Reliability Engineer to join ASE Security SRE, working in close partnership with development teams to operate and mature services spanning identity, token issuance, and access management. These services sit directly in the path of customer-facing flows and carry significant blast radius. This role works day to day with the engineering teams who build these services, sharing ownership of their reliability, operational quality, and on-call.
We are seeking a Site Reliability Engineer to join a team working directly alongside development partners across identity, token issuance, and access management. You will share responsibility for the reliability, operability, and security posture of the services in this area, contributing from design and planning through to production operation and incident response. You will have a seat in planning and design reviews, and be accountable for operational quality alongside the engineers who build the service.
You will help define and drive adoption of sound operational practices, grounded in what actually works for the team and the threat model in front of them. You will bring deep comfort with distributed, stateful systems operating at scale and high availability expectations.
Minimum Qualifications
- Bachelor's degree in Computer Science, a related engineering field, or equivalent experience. Advanced degree preferred
- 7+ years in a Site Reliability Engineering or infrastructure focused role
- Strong working experience in at least one of: Golang or Swift
- Deep experience with distributed, stateful systems operating at high scale and high availability
- Strong understanding of networking, storage, and performance at scale
- Experience running Tier 1 services with 24/7 support expectations
- Knowledge of securing APIs, including authentication and authorization mechanisms for RESTful and gRPC APIs
- Understanding of authentication protocols such as OAuth and JWT
Preferred Qualifications
- Experience with Kubernetes and container orchestration at scale
- Experience with authentication, authorization, or cryptographic systems