Senior Security Engineer, Data Center Network

Senior Security Engineer, Data Center Network

San Francisco Bay Area, California, United States Software and Services

Do you want to help build some of the largest and most consequential enterprise and customer technology systems in the world? Join Apple’s Information Systems and Technology (IS&T) organization.IS&T is the engine behind everything Apple does for customers and for the people who build for them. It’s Apple’s central nervous system. Supporting 2.5 billion active Apple devices, processing billions of secure transactions, and keeping the technology that defines modern life running flawlessly, IS&T makes the impossible feel effortless.”Do you love building solutions to handle global complexity and immense scale? Imagine what you could do here.Infrastructure Services is part of IS&T and the foundation of Apple's global network operations — managing data center equipment and systems to deliver compute, storage, and networking services for teams across Apple, including its internal developer community. From individual facilities to a worldwide network, Infrastructure Services ensures the technology underneath everything works without question.

Description

As part of the Data Center Network Security Engineering team, you will collaborate closely with the SDI team to influence the design of next-generation security products and features, and to operationalize innovative security solutions that power Apple’s hyperscale network infrastructure. Our environment extends well beyond Apple’s data centers and edge locations, encompassing Apple Cloud platforms as well as third-party cloud environments.This role spans the full spectrum of network security, from on-premises data centers to hybrid and multi-cloud architectures. We are seeking a highly motivated engineer with a strong passion for designing, implementing, and securing large-scale cloud and data center network infrastructures. You will play a key role in protecting hybrid environments by applying advanced network security controls, automation, and industry best practices across on-prem, cloud, and multi-cloud deployments.

Responsibilities

• Sophisticated knowledge of TCP/IP, routing protocols, security protocols and large scale network features.
• Deep technical background in network-layer security mechanisms
• Routing isolation
• Routing security
• Stateful and stateless firewalls
• Network access control
• VPN and tunneling technologies
• Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices.
• Experience deploying and scaling overlay networking technologies (VXLAN, GRE, IPSec, etc)

Minimum Qualifications

• Sophisticated knowledge of TCP/IP, routing protocols, security protocols and large scale network features.
• Deep technical background in network-layer security mechanisms
• Routing isolation
• Routing security
• Stateful and stateless firewalls
• Network access control
• VPN and tunneling technologies
• Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices.
• Experience deploying and scaling overlay networking technologies (VXLAN, GRE, IPSec, etc)

Preferred Qualifications

• 10+ years experience in building, securing, and deploying large scale data center network & cloud environments
• CISSP or equivalent certification(s)
• Extensive understanding of public & private cloud networking security architecture & compute virtualization technologies
• Experience in OVS, Container & Kube networking
• Engineering leadership experience
• Self-starter, self-motivated, self-directed, and self-sufficient. Drives ideas from inception to implementation
• Demonstrates consistent technical, organizational, and industry-level awareness.
• Technical presentation and communication skills with the ability to articulate concepts, designs and decisions to both technical and non-technical audiences.
• Proficiency in one or more software languages (Swift, Golang, Python, etc)

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $175,500 and $311,700, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Apple accepts applications to this posting on an ongoing basis.