Kubernetes Security Engineer

Apple, Inc.; Austin (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Apple, Inc. is seeking a Kubernetes Security Engineer to help secure the next generation of Kubernetes platforms across our services. This hands-on role involves implementing tooling, frameworks, and controls in collaboration with ASE Security, Platform SREs, and developers.

You’ll secure infrastructure powering iCloud, iTunes, Siri, and Maps, ensuring reliability and safety for millions of users. You will design security frameworks, drive alignment with SREs and developers, and own complete

Qualifications

• 5+ years of platform security and/or software engineering in infrastructure and applications
• Hands-on experience with Kubernetes at scale
• Clear written and verbal communication for diverse audiences
• Extensive Kubernetes security solution design experience
• Go and Python scripting skills
• Ability to drive complex projects from conception to production
• Bachelor's Degree or equivalent preferred

Responsibilities

• Collaborate with internal security teams on standards, products, and adoption
• Design, develop, and implement security frameworks, controls, tooling, and automation for Kubernetes platforms with SREs
• Align security priorities with Kubernetes SREs and developers
• Respond to and lead resolution of incidents affecting Kubernetes platforms
• Own solutions and ship complete products with monitoring, alerting, and documentation

Skills

Kubernetes security

Platform security

Go

Python

Communication

Incident response

Bachelor's degree

Education

Bachelor's Degree or equivalent experience

Job description

Austin, Texas, United States Software and Services

The Apple Service Engineering (ASE) Security team secures the systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, and Maps). We secure the foundation on which Apple’s software developers build the products that our customers love. At the heart of the foundation is Kubernetes, which powers a growing amount of what we do. We are looking for a passionate and talented Kubernetes Security Engineer to help secure our complex and large-scale Kubernetes infrastructure. This is a unique opportunity to make a real impact in securing the platforms that serve millions of people each day.

Description

We are looking for a Kubernetes Security Engineer to help secure the next generation of Kubernetes Platforms at Apple. This is a hands-on technical role that involves implementing tooling, frameworks, and controls. You’ll be working with ASE Security, Platform SREs, and developers to develop and drive adoption of security initiatives across Kubernetes platforms at Apple.

Responsibilities

• Collaborate with internal security teams on standards, products, and adoption
• Design, develop, and implement security frameworks, controls, tooling, and automation for Kubernetes platforms in tandem with SREs
• Drive alignment of security's priorities with Kubernetes SREs and developers
• Respond to and lead resolution of incidents affecting the security of Kubernetes platforms
• Own solutions, and ship complete products with monitoring, alerting, and documentation

Minimum Qualifications

• 5+ years experience in platform security and/or software engineering experience in infrastructure and application development, or a closely related security engineering discipline
• Deep, hands-on experience with Kubernetes environments at scale
• Ability to communicate thoughtfully and clearly, both verbally and in writing, to discuss complex technical concepts with diverse audiences
• Extensive experience designing Kubernetes security solutions to solve platform-level security issues and concerns
• Software development skills in Golang and scripting skills in Python
• The tenacity and perseverance to drive a complex project all the way from conception to production
• Bachelor's Degree or equivalent experience preferred

Preferred Qualifications

• Prior experience contributing to or driving a secure-by-default platform initiative across a large engineering organization
• Hands on experience with any of: policy as code, workload identity, Linux security (SELinux, Seccomp, eBPF), SIEM tooling, GitOps, supply-chain security, container runtimes, image signing, admission control, cluster configuration monitoring, threat detection, service mesh, operator/controller development, and IAM frameworks
• Kubernetes Certifications (CKS, CKAD, CKA)
• A track record of independently driving ambiguous, complex security initiatives
• Experience leveraging AI to accelerate work and approach new problems
• Strong documentation and communication skills

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Apple accepts applications to this posting on an ongoing basis.