Senior Software Engineer - Security Frameworks

Socket.dev; Seattle (WA); On-site; USD 175,000 - 308,500; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Retirement benefits

Stock options

Tuition reimbursement

Job summary

Apple Inc. is seeking a Senior Software Engineer to advance the ASE Security Frameworks. You will design and implement client libraries and SDKs across Java, Go, Swift, Rust, and TypeScript to strengthen authentication, authorization, token issuance, and request verification.

You will collaborate with cross-functional teams to embed secure practices, implement durable logging, and support policy updates and caching across services.

Qualifications

• 8+ years in software development or production operations in a large-scale environment.
• Strong programming in Golang and Java; willing to learn Swift, Rust, Python and TypeScript.
• Experience building high-performant client SDKs and libraries with caching and config updates.
• Knowledge of securing APIs (mTLS, authentication, authorization) for RESTful and gRPC APIs.

Responsibilities

• Design and implement client libraries and SDKs to bolster security posture.
• Build Security Frameworks in Java, Go, Swift, Rust, and TypeScript and integrate with partner services.
• Address identity, authorization challenges and perform request verification and token exchange.
• Lead delivery with secure practices, monitoring, and telemetry in client libraries.

Skills

Golang

Java

Swift

Rust

Python

TypeScript

Education

Bachelor's degree

Tools

Git

CI/CD

Open Policy Agent

Job description

Senior Software Engineer - Security Frameworks

Seattle, Washington, United States Software and Services

The Apple Service Engineering (ASE) Security team builds and provides secure systems and infrastructure that fuel Apple’s services (such as iCloud, Apple Music, Apple Fitness, and Apple TV). We are the secure foundation on which Apple’s software developers build the products that keep our customers safe and secure. The ASE Security Frameworks team is expanding and we looking for a passionate and dedicated Senior Software Engineer who will focus on creating fundamental security services, addressing identity and authorization challenges. Success in this role requires individuals to possess a blend of profound technical expertise, extensive knowledge in security, and substantial experience in large-scale operations.

Description

As a Senior Software Engineer on the ASE Security Frameworks team, you will play a crucial role in ensuring our customers adhere to the latest and most effective security practices for addressing identity and authorization challenges. Collaborating with cross-functional teams, you will be responsible for designing and implementing client libraries and SDKs to bolster our overall security posture throughout the organization. Your duties will include building Security Frameworks in multiple languages (Java, Go, Swift, Rust, TypeScript) and working with our partner engineering team to ensure that these frameworks are integrated into our partner team’s services to perform request verification, token issuance and exchange, authentication, authorization, durable decision logging, policy updates and caching. You will set high standards and deliver on ASE’s vision for our security protocols, working with engineering teams as they incorporate secure practices and tools into their development processes.

Minimum Qualifications

• 8+ years of software development or production operations experience in a large-scale environment
• Bachelor's Degree or equivalent experience preferred
• Strong programming skills in Golang and Java, ability and willingness to learn Swift, Rust, Python and TypeScript as you will be building client frameworks for customers operating in all of these languages
• Experience building and operating high-performant client SDKs and libraries with features such as caching, online and offline configuration updates, major version releases, breaking changes, feature flagging and similar concepts
• Knowledge of securing APIs, including input validation, mTLS, authentication, and authorization mechanisms for RESTful and gRPC APIs

Preferred Qualifications

• Experience designing and implementing SDK architecture patterns including dependency injection, plugin systems, retry logic, and error handling strategies
• Deep understanding of Identity and Access Management (IAM) concepts including RBAC, ABAC, OAuth, OpenID Connect, as well as Policy-as-Code systems like Open Policy Agent and Rego
• Knowledge of client-side security best practices including secure credential storage, token refresh patterns, and protection against common attacks (CSRF, XSS, token leakage)
• Experience with cross-platform SDK development and maintaining API consistency across different programming languages and runtime environments
• Understanding of backward compatibility strategies for SDK versioning, deprecation policies, and migration paths for breaking changes
• Experience with monitoring and telemetry in client libraries including error reporting, usage analytics, and performance metrics collection

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $175,000 and $308,500, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant.

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, you help you build … This is an excerpt. Learn more about accessibility in Apple’s workplace. Learn about reasonable accommodations for job applicants.

Apple accepts applications to this posting on an ongoing basis.