Platform Security Engineer Wallet Payments & Commerce

The Wallet u0026 Payments Security Solutions team sits at the intersection of developer experience and customer trust building the foundational security layer that every product in the Apple Pay portfolio depends on. We are a group of security engineers passionate about enabling fast safe engineering at scale across a modern Kubernetes-based multi-cloud platform. This role is an opportunity to shape secure-by-default practices across Apple Pay engineering organizations working on Payments Transit Access u0026 Identity products. If youre passionate about security and customer safety we may have the job for you.

As a Platform Security Engineer on the Wallet u0026 Payments Security Solutions team you will design build and operate security application frameworks and solutions for a Kubernetes-based developer platform spanning multiple cloud providers. You will partner closely with platform and product engineering teams to embed security into every stage of the development lifecycle ensuring guardrails never become friction. Your work will directly protect Apple customers and the engineers who build the products they rely on every day. Further as part of this role you will frequently collaborate with other security engineers and architects across Apple to identify define and design security solutions which elevate overall security profile of Apple Services.

Develop internal frameworks libraries tools and processes that make the secure path the easiest path for every engineer on the platformnDesign and implement security frameworks controls tooling and automation for a Kubernetes-based multi-cloud platform serving Wallet u0026 Payments EngineeringnChampion secure-by-default infrastructure patterns and drive adoption of safe engineering practices across the organization without sacrificing developer velocitynPartner with platform product and infrastructure engineering teams to identify security risks and deliver pragmatic mitigations at the architectural levelnConduct threat modeling of new platform capabilities to incorporate security during early phases of platform developmentnRespond to and lead resolution of incidents affecting the security of developer platform conducting thorough post-incident reviewsnWork AI-forward by using coding agents and LLM-based tooling as a normal part of development and own the correctness of what you ship regardless of what drafted it.

5 years of experience in platform security and/or software engineering experience in infrastructure and application development or a closely related security engineering disciplinenExperience in Go Kotlin/Java and Spring with current and emerging security architecture design for cloud environmentsnAbility to communicate thoughtfully and clearly both verbally and in writing to discuss complex technical concepts with diverse audiences including global for developer enablement and building security as a productnAbility to influence engineering culture through documentation advocacy and cross-team collaboration rather than mandate alonenThe tenacity and perseverance to drive a complex project all the way from conception to in Computer Science or equivalent experience/skills in application development and security.

Prior experience contributing to or driving a secure-by-default platform initiative across a large engineering organizationnExperience with Identity and Access management frameworksnDeep expertise in Kubernetes security including RBAC admission control pod security standards network policy and workload identitynExperience designing and implementing security controls across at least two major cloud providersnExperience hardening containers and orchestration: image provenance admission control runtime and network policy service mesh configuration and clean isolation across micro servicesnExperience with Supply Chain Security and optimizing Vulnerability management protocols and applied cryptography in practice: OAuth2 OIDC JWT SAML mutual TLS PKI encryption and signing primitives. nFluency with coding agents and LLM-based development tooling and judgment about when to trust their output.