Kubernetes Security Engineer
Apple•Austin, TX
About The Position
The Apple Service Engineering (ASE) Security team secures the systems and infrastructure that support Apple services, including iCloud, iTunes, Siri, and Maps. Kubernetes is a central part of this foundation and powers a growing portion of Apple’s services. The Kubernetes Security Engineer will help secure Apple’s large-scale Kubernetes infrastructure and next-generation Kubernetes platforms. This is a hands-on technical role focused on implementing security tooling, frameworks, and controls. The engineer will work with ASE Security, Platform SREs, developers, and internal security teams to develop security solutions and drive adoption of security initiatives across Kubernetes platforms at Apple.
Requirements
- Deep, hands-on experience with Kubernetes environments at scale.
- Extensive experience designing Kubernetes security solutions to address platform-level security issues and concerns.
- Software development skills in Golang.
- Scripting skills in Python.
- Experience running code at scale in production environments.
- Strong documentation and communication skills.
- Experience leveraging AI to accelerate work and approach new problems.
Nice To Haves
- Bachelor’s degree or equivalent experience preferred.
- Hands-on experience with Policy as Code (OPA).
- Hands-on experience with Workload Identity (SPIFFE/SPIRE).
- Hands-on experience with Linux security, including SELinux, Seccomp, or eBPF.
- Hands-on experience with SIEM tooling, such as DataBricks or Splunk.
- Hands-on experience with GitOps tools, such as Flux or ArgoCD.
- Hands-on experience with supply-chain security, including SBOMs, Syft, or Grype.
- Hands-on experience with container runtimes such as containerd.
- Hands-on experience with image signing tools, such as Notary or Cosign.
- Hands-on experience with admission control tools, such as Gatekeeper, Kyverno, or Pod Security Admission.
- Hands-on experience with cluster configuration monitoring tools such as kube-bench.
- Hands-on experience with threat detection tools such as Falco.
- Hands-on experience with service mesh technologies such as Cilium.
- Hands-on experience with operator or controller development using controller-runtime.
- Kubernetes certifications such as CKS, CKAD, or CKA.
- A track record of independently driving ambiguous, complex security initiatives.
Responsibilities
- Collaborate with internal security teams on security standards, products, and adoption.
- Drive alignment of security priorities with Kubernetes SREs and developers.
- Design and develop security solutions for Kubernetes platforms in partnership with SREs.
- Deploy security solutions, including monitoring and documentation.
- Independently drive ambiguous and complex security initiatives.
