Security Site Reliability Engineer - Apple Service Engineering
Summary
A Security Site Reliability Engineer joins Apple Service Engineering's new SRE team to run and scale foundational security services (host access, disk encryption, identity/authentication) in partnership with the security dev team. Day-to-day work spans 24/7 Tier 1 service operations, security baselines, incident response, and automation, using Linux security, containers/Kubernetes, and languages l
People at Apple don't just build products, they craft the kind of experiences that have revolutionized entire industries. The diverse collection of our people and their ideas inspire innovation in everything we do. Imagine what you could do here. Join Apple, and help us leave the world better than we found it. The Apple Service Engineering (ASE) team builds and provides the systems and infrastructure that fuel Apple's services, including iCloud, iTunes, Siri, and Maps. We are the foundation on which Apple's software developers build the products our customers love.
We are looking for a Site Reliability Engineer to join ASE Security SRE, working in close partnership with development teams to operate and mature services spanning identity, token issuance, and access management. These services sit directly in the path of customer-facing flows and carry significant blast radius. This role works day to day with the engineering teams who build these services, sharing ownership of their reliability, operational quality, and on-call.
We are seeking a Site Reliability Engineer to join a team working directly alongside development partners across identity, token issuance, and access management. You will share responsibility for the reliability, operability, and security posture of the services in this area, contributing from design and planning through to production operation and incident response. You will have a seat in planning and design reviews, and be accountable for operational quality alongside the engineers who build the service.
You will help define and drive adoption of sound operational practices, grounded in what actually works for the team and the threat model in front of them. You will bring deep comfort with distributed, stateful systems operating at scale and high availability expectations.
Minimum Qualifications
- Bachelor's degree in Computer Science, a related engineering field, or equivalent experience. Advanced degree preferred
- 7+ years in a Site Reliability Engineering or infrastructure focused role
- Strong working experience in at least one of: Golang or Swift
- Deep experience with distributed, stateful systems operating at high scale and high availability
- Strong understanding of networking, storage, and performance at scale
- Experience running Tier 1 services with 24/7 support expectations
- Knowledge of securing APIs, including authentication and authorization mechanisms for RESTful and gRPC APIs
- Understanding of authentication protocols such as OAuth and JWT
Preferred Qualifications
- Experience with Kubernetes and container orchestration at scale
- Experience with authentication, authorization, or cryptographic systems
- Strong grasp of SRE principles including monitoring, alerting, error budgets, and fault analysis
- Experience partnering directly with product or platform engineering teams on reliability
- Knowledge of policy-based authorization engines such as Open Policy Agent or Zanzibar