Secure Systems Engineer Platform Architecture Security Team

At Apple our Platform Architecture group is responsible for connecting our hardware software and servers into one unified system. Youll join a team of architects who are dedicated to securing the worlds most advanced consumer devices. Our products are trusted for storing personal data and our goal is to ensure cutting-edge safeguards for our users. The services our team supports exist to make those products secure: they establish the trust each device depends on from the factory floor through every day in a customers hands. Were looking for dedicated and inspired individuals to help improve on the security of Apples products.

In this role you will define the architecture and oversee the operation of distributed systems that set and enforce security policy for the development manufacture deployment and operation of Apple products ultimately driving continuous security improvements for these products. This role is largely self-directed and suits an engineer with deep hands-on experience building and operating secure systems who is ready to grow into an architectural role.

Define the security requirements and drive the security architecture for the distributed systems that set and enforce Apples product security emerging threats and develop threat models for those the security policy enforced by those services reasoning about how they interact with Apple products to ensure end-to-end security guarantees are prototypes and tooling to validate security designs and automate policy cross-functional teams throughout the service lifecycle from design through deployment and operation to resolve system-level issues without sacrificing security or compromising availability and a wide range of interpersonal and technical skills to champion robust security design and best practices across the teams that build and operate those strong written and oral communication skills to partner with engineering teams demonstrating the confidence to advocate for security requirements even under natural curiosity and a problem-solving mindset to tackle unfamiliar systems and ambiguous project scopes adapting quickly to keep security initiatives moving forward.

Bachelors degree in Computer Science Computer Engineering related engineering degree or equivalent job-related applying security practices to the design development or operation of production with common programming languages such as Python or conducting security architecture reviews threat modeling or identifying vulnerabilities in complex distributed with cryptography and security protocols including at least two of the following: PKI TLS Key Management Secure Boot or Authentication/Authorization.

10 years of relevant industry experience. nAbility to understand complex systems employing strong critical thinking skills to identify security issues in implementation and architecture. nKnowledge of cryptographic principles (e.g. symmetric vs asymmetric crypto confidentiality vs integrity) and technologies such as authentication and authorization key management TLS certificate lifecycle management secure boot and designing and developing secure services and scalable infrastructure for highly available applications such as distributed systems micro-services and cloud with or practical application of threat modeling methodologies such as STRIDE or experience such as continuous integration/continuous deployment (CI/CD) infrastructure as code (IaC) or automation of development testing and deployment to track emerging security trends and threats and proactively incorporate them into PKI architecture and signing policy to stay ahead of evolving with systems programming languages such as C or C.