Kubernetes Security Engineer
Free account needed to apply or save. It takes a minute, and we'll bring you right back to this job.
Skills
About the role
The Apple Service Engineering (ASE) Security team secures the systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, and Maps). We secure the foundation on which Apple’s software developers build the products that our customers love. At the heart of the foundation is Kubernetes, which powers a growing amount of what we do. We are looking for a passionate and talented Kubernetes Security Engineer to help secure our complex and large-scale Kubernetes infrastructure. This is a unique opportunity to make a real impact in securing the platforms that serve millions of people each day.
Description
We are looking for a Kubernetes Security Engineer to help secure the next generation of Kubernetes Platforms at Apple. This is a hands-on technical role that involves implementing tooling, frameworks, and controls. You’ll be working with ASE Security, Platform SREs, and developers to develop and drive adoption of security initiatives across Kubernetes platforms at Apple.
Minimum Qualifications
5+ years experience in platform security and/or software engineering experience in infrastructure and application development, or a closely related security engineering discipline
Deep, hands-on experience with Kubernetes environments at scale
Ability to communicate thoughtfully and clearly, both verbally and in writing, to discuss complex technical concepts with diverse audiences
Extensive experience designing Kubernetes security solutions to solve platform-level security issues and concerns
Software development skills in Golang and scripting skills in Python
The tenacity and perseverance to drive a complex project all the way from conception to production
Bachelor's Degree or equivalent experience preferred
Preferred Qualifications
Prior experience contributing to or driving a secure-by-default platform initiative across a large engineering organization
Hands on experience with any of: policy as code, workload identity, Linux security (SELinux, Seccomp, eBPF), SIEM tooling, GitOps, supply-chain security, container runtimes, image signing, admission control, cluster configuration monitoring, threat detection, service mesh, operator/controller development, and IAM frameworks
Kubernetes Certifications (CKS, CKAD, CKA)
A track record of independently driving ambiguous, complex security initiatives
Experience leveraging AI to accelerate work and approach new problems
Strong documentation and communication skills