Senior Software Engineer, Security Authorization

Apple • Seattle, WA

5d

About The Position

The Senior Software Engineer will help customers adopt effective security practices for identity and authorization across Apple Services Engineering. Working with cross-functional teams, the engineer will design and implement systems that strengthen the organization’s security posture. The role defines, advocates for, and drives adoption of standardized minimum security requirements, monitors progress, and guides engineering teams in incorporating secure practices and tools into development processes. It calls for technical leadership, substantial security expertise, and experience operating at large scale.

Requirements

• 15 years of software development or production operations experience in a large-scale environment.
• Strong programming skills in Golang, including experience working extensively with Go-based applications.
• Proven experience building and operating large-scale, highly available, distributed, and fault-tolerant systems.
• Experience with Kubernetes, Docker, and containerization; CNCF Kubernetes Developer certification or equivalent.
• Knowledge of securing RESTful and gRPC APIs, including input validation, authentication, and authorization mechanisms.
• Bachelor’s or master’s degree in Computer Science, or equivalent experience.

Nice To Haves

• Hands-on systems experience, including configuring and troubleshooting system initialization processes.
• Familiarity with policy-based authorization frameworks and languages such as Open Policy Agent (OPA) and Rego.
• Understanding of network security principles, protocols, and technologies, including firewalls, VPNs, and secure communication channels.
• Familiarity with incident response processes and the ability to respond effectively to security incidents.
• Knowledge of cryptographic algorithms and protocols for securing data, including TLS/SSL, digital signatures, hashing, and encryption.
• Knowledge of authentication and authorization mechanisms, including OAuth, JWT, and other identity management protocols.

Responsibilities

• Design and implement systems that strengthen security across the organization.
• Define, advocate for, and drive adoption of standardized minimum security requirements.
• Monitor progress toward security requirements.
• Set standards and influence the future of security protocols.
• Guide engineering teams as they incorporate secure practices and tools into development processes.
• Address identity and authorization challenges at scale.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior