3 days ago
Responsibilities
- Own the design, code, security, and engineering standards of the platform managing Apple’s baseboard management controllers.
- Write and review production code for a privileged, availability-critical service.
- Improve authentication, authorization, credential handling, access segmentation, and automated-system identity.
- Build security telemetry for SIEM and detection pipelines and make privileged activity visible to detection teams.
- Modernize fleet management using standards-based out-of-band management technologies.
- Define requirements for secure management controllers, firmware delivery, firmware trust, and future hardware.
- Drive architecture decisions and cross-team migrations while mentoring engineers and explaining security trade-offs.
- Collaborate with datacenter operations, SRE, hardware, network, and detection teams.
Requirements
- 8+ years of software engineering experience, including end-to-end ownership of a production system or platform.
- 5+ years writing production Go code with deep proficiency in Go.
- Experience building security telemetry for SIEM and detection pipelines, such as Splunk and OpenTelemetry.
- Hands-on experience with authentication and authorization at scale, including PKI, mTLS, X.509 certificate identity, and fine-grained access control.
- Experience with Swift and Rust.
- BS/MS in Computer Science or equivalent experience.
- Preferred experience with IPMI, DMTF Redfish, OpenBMC, HPE iLO, or Dell iDRAC.
- Preferred experience finding and fixing security flaws through code review, threat modeling, or security testing.
- Preferred technical leadership experience driving architecture decisions and cross-team migrations, mentoring engineers, and communicating security trade-offs.
- Preferred experience with gRPC, Protocol Buffers, and running PostgreSQL in production.
- Preferred experience managing secrets and credentials at fleet scale, including rotation and emergency access.
- Preferred experience building and operating highly available distributed services.
- Familiarity with network segmentation and zero-trust access patterns, such as identity-aware proxies.
- Knowledge of firmware security, including secure boot, firmware signing and updates, TPMs, and hardware roots of trust.
- Hands-on experience using AI coding assistants on a production codebase.
Tech Stack
Categories
About Apple
Apple designs and sells consumer electronics, software, and services for consumers and professionals worldwide, including iPhone, Mac, iPad, Apple Watch, and AirPods, plus platforms like iOS/macOS and services such as the App Store, iCloud, Music, and TV+. Its business combines device sales with services and subscriptions and in-house silicon design. Founded in 1976, Apple is headquartered in Cupertino, California, and trades on NASDAQ as AAPL.