Secure Systems Engineer

Responsibilities

• Define architecture for distributed systems that establish and enforce security policy across product development, manufacturing, deployment, and operation.
• Oversee the operation of secure production services and infrastructure for highly available applications.
• Conduct security architecture reviews, threat modeling, and vulnerability identification in complex distributed systems.
• Design and develop secure services and scalable infrastructure, including PKI architecture and signing policy.
• Track emerging security trends and threats and incorporate them into security architecture and policy.
• Drive continuous security improvements for Apple products.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, a related engineering field, or equivalent job-related experience.
• Experience applying security practices to the design, development, or operation of production services.
• Experience with programming languages such as Python or Go.
• Experience conducting security architecture reviews, threat modeling, or vulnerability identification in complex distributed systems.
• Experience with cryptography and security protocols, including at least two of PKI, TLS, key management, secure boot, or authentication and authorization.
• Preferred: 10+ years of relevant industry experience.
• Knowledge of cryptographic principles, authentication and authorization, key management, TLS, certificate lifecycle management, secure boot, and PKI.
• Experience designing and developing secure services and scalable infrastructure for distributed systems, microservices, and cloud platforms.
• Familiarity with or practical application of threat modeling methodologies such as STRIDE or Trike.
• DevOps experience involving continuous integration and deployment, infrastructure as code, or development, testing, and deployment automation pipelines.
• Experience with systems programming languages such as C or C++.