Kubernetes Security Engineer

Apple • Austin, TX

4d

About The Position

The Apple Service Engineering (ASE) Security team secures the systems and infrastructure that power Apple services, including iCloud, iTunes, Siri, and Maps. The team protects the foundation on which Apple developers build products. Kubernetes is a central part of this foundation and supports a growing share of Apple’s services.

This hands-on technical role focuses on securing Apple’s next-generation Kubernetes platforms. The engineer will implement tooling, frameworks, and security controls and work with ASE Security, Platform SREs, and developers to develop and drive adoption of security initiatives across Apple’s Kubernetes platforms.

Requirements

• Deep, hands-on experience with Kubernetes environments at scale.
• Extensive experience designing Kubernetes security solutions to address platform-level security issues and concerns.
• Software development skills in Golang.
• Scripting skills in Python.
• Experience running code at scale in production environments.

Nice To Haves

• Bachelor’s degree or equivalent experience is preferred.
• Hands-on experience with Policy as Code, such as OPA.
• Hands-on experience with workload identity, such as SPIFFE/SPIRE.
• Hands-on experience with Linux security, such as SELinux, Seccomp, or eBPF.
• Hands-on experience with SIEM tooling, such as DataBricks or Splunk.
• Hands-on experience with GitOps, such as Flux or ArgoCD.
• Hands-on experience with supply-chain security, such as SBOMs, Syft, or Grype.
• Hands-on experience with container runtimes, such as containerd.
• Hands-on experience with image signing, such as Notary or Cosign.
• Hands-on experience with admission control, such as Gatekeeper, Kyverno, or Pod Security Admission.
• Hands-on experience with cluster configuration monitoring, such as kube-bench.
• Hands-on experience with threat detection, such as Falco.
• Hands-on experience with service mesh, such as Cilium.
• Hands-on experience with operator or controller development, such as controller-runtime.
• Kubernetes certifications such as CKS, CKAD, or CKA.
• A track record of independently driving ambiguous, complex security initiatives.
• Experience leveraging AI to accelerate work and approach new problems.
• Strong documentation and communication skills.

Responsibilities

• Implement tooling, frameworks, and controls to secure Kubernetes platforms.
• Develop and drive adoption of security initiatives across Apple’s Kubernetes platforms in collaboration with ASE Security, Platform SREs, and developers.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed