Senior Security Software Engineer, Datacenter Infrastructure Security

Apple • Austin, TX

7d

About The Position

The Foundational Security team in Apple Services Engineering secures the low-level foundations of Apple’s datacenter fleet, including hardware-backed trust, disk encryption, and systems used to manage servers below the operating system. This senior engineer will take technical ownership of the platform that manages baseboard management controllers, set its engineering and security standards, shape how access is granted and verified, and lead its modernization toward standards-based management.

The role owns the design, code, and security of a privileged, availability-critical service. The engineer will write and review production code; identify and reduce risks in authentication, authorization, and credential handling; and make privileged activity visible to detection teams. They will work closely with datacenter operations, SRE, hardware, network, and detection teams, and help migrate the many internal teams and tools that depend on the platform.

Over time, the engineer will help define secure out-of-band management at Apple, including access segmentation across environments, trusted firmware delivery, requirements for management controllers in future hardware, and secure access for automated systems as well as people.

Requirements

• At least 8 years of software engineering experience, including end-to-end ownership of a production system or platform.
• Deep proficiency in Go, including at least 5 years writing production Go code.
• Experience building security telemetry for SIEM and detection pipelines, such as Splunk or OpenTelemetry.
• Hands-on experience with authentication and authorization at scale, including PKI, mTLS, X.509 certificate identity, and fine-grained access control.
• Experience with Swift and Rust.
• BS or MS in Computer Science, or equivalent experience.
• Hands-on experience with server management technologies such as IPMI, DMTF Redfish, OpenBMC, or vendor BMCs such as HPE iLO and Dell iDRAC.
• Experience finding and fixing security flaws in networked services through code review, threat modeling, or security testing.
• A record of technical leadership, including driving architecture decisions and cross-team migrations, mentoring engineers, and explaining security trade-offs to engineers and leadership.
• Experience with gRPC and Protocol Buffers, and with running PostgreSQL in production.
• Experience managing secrets and credentials through their lifecycle at fleet scale, including rotation and emergency access.
• Experience building and operating highly available, distributed services that other teams depend on.
• Familiarity with network segmentation and zero-trust access patterns, such as identity-aware proxies.
• Knowledge of firmware security, including secure boot, firmware signing and updates, TPMs, and hardware roots of trust.
• Hands-on experience using AI coding assistants on a production codebase.

Responsibilities

• Take technical ownership of the platform that manages baseboard management controllers.
• Own the design, production code, and security of a privileged, availability-critical service.
• Set the platform’s engineering and security standards and shape how access is granted and verified.
• Write and review production code.
• Identify and mitigate risks in authentication, authorization, and credential handling.
• Make privileged activity visible to teams responsible for detecting misuse.
• Lead the platform’s modernization toward standards-based management and support migrations for dependent internal teams and tools.
• Collaborate with datacenter operations, SRE, hardware, network, and detection teams.
• Help define secure out-of-band management, including environment access segmentation, trusted firmware delivery, future management-controller requirements, and access for automated systems.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior