Platform Security Engineer

Responsibilities

• Design, build, and operate security application frameworks and solutions for a Kubernetes-based multi-cloud developer platform.
• Partner with platform and product engineering teams to embed security throughout the development lifecycle.
• Design secure-by-default controls for Kubernetes, containers, orchestration, identity, access, supply chain security, and vulnerability management.
• Collaborate with security engineers and architects across Apple to define and implement security solutions.
• Drive complex security projects from conception through production and influence engineering culture through documentation, advocacy, and collaboration.

Requirements

• 5+ years of experience in platform security, infrastructure and application software engineering, or a closely related security engineering discipline.
• Experience with Go, Kotlin or Java, and Spring Framework.
• Familiarity with security architecture design for cloud environments.
• BS in Computer Science or equivalent experience or skills in application development and security.
• Preferred experience driving secure-by-default platform initiatives across large engineering organizations.
• Preferred experience with identity and access management frameworks, Kubernetes security, multi-cloud security controls, container hardening, supply chain security, and vulnerability management.
• Preferred practical experience with OAuth2, OIDC, JWT, SAML, mutual TLS, PKI, encryption, and signing primitives.
• Fluency with coding agents and LLM-based development tooling, including judgment about when to trust their output.
• Ability to communicate complex technical concepts clearly and influence engineering culture through documentation, advocacy, and cross-team collaboration.