About The Position
Join Apple Service Engineering (ASE), which builds and provides the systems and infrastructure behind Apple services including iCloud, iTunes, Siri, and Maps. The ASE Security SRE team partners with development teams to operate and mature services spanning identity, token issuance, and access management. These services support customer-facing flows and have significant blast radius. This role shares responsibility for the reliability, operability, and security posture of these services, contributing from design and planning through production operations and incident response. The engineer participates in planning and design reviews and is accountable for operational quality alongside the engineers building the services. The role helps define and drive adoption of operational practices suited to the team and its threat model, and requires deep comfort with distributed, stateful systems operating at scale with high availability expectations.
Requirements
- Bachelor's degree in Computer Science, a related engineering field, or equivalent experience.
- At least 7 years in a Site Reliability Engineering or infrastructure-focused role.
- Strong working experience in at least one of Golang or Swift.
- Deep experience with distributed, stateful systems operating at high scale and high availability.
- Strong understanding of networking, storage, and performance at scale.
- Experience running Tier 1 services with 24/7 support expectations.
- Knowledge of securing APIs, including authentication and authorization mechanisms for RESTful and gRPC APIs.
- Understanding of authentication protocols such as OAuth and JWT.
Nice To Haves
- Advanced degree.
- Experience with Kubernetes and container orchestration at scale.
- Experience with authentication, authorization, or cryptographic systems.
- Strong grasp of SRE principles including monitoring, alerting, error budgets, and fault analysis.
- Experience partnering directly with product or platform engineering teams on reliability.
- Knowledge of policy-based authorization engines such as Open Policy Agent or Zanzibar.
Responsibilities
- Partner with development teams across identity, token issuance, and access management.
- Share responsibility for service reliability, operability, and security posture.
- Contribute from design and planning through production operations and incident response.
- Participate in planning and design reviews.
- Be accountable for operational quality alongside the engineers who build the services.
- Define and drive adoption of sound operational practices appropriate to the team and its threat model.
- Support Tier 1 services with 24/7 support expectations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
