Site Reliability Engineer (SRE) - Security, Apple Service Engineering

at  Apple

SUMMARY

Posted: 11 Sep 2024
Role Number:200567359
People at Apple don’t just build products - they craft the kind of experience that have revolutionized entire industries. The diverse collection of our people and their ideas inspire innovation in everything we do. Imagine what you could do here! Join Apple, and help us leave the world better than we found it. The Apple Service Engineering(ASE) team builds and provides systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, and Maps). We are the foundation on which Apple’s software developers build the products that our customers love. We are looking for passionate and talented Site Reliability Engineer to continue our focus in providing our customers the highest quality Apple Services experience. Our services have to scale globally, stay highly available, and “just work.” If you love designing, engineering and running systems and infrastructure that will help millions of customers, then this is the place for you! The services that this team manages are foundational security services. From host access and disk encryption to identity and authentication, these services are both critical for operational as well as securing Apples fleet and protecting out most crical data. This is a role on a new SRE team dedicated to these security services, who will work in deep partnership with the ASE Security dev team to bring up and mature new services as part of our infrastructure investments.

DESCRIPTION

We are seeking a highly skilled and motivated Security Site Reliability Engineer (SRE) to join our dynamic and growing team. As a Security SRE, you will play a critical role in ensuring the security, reliability, and scalability of our systems and infrastructure. You will collaborate with cross-functional teams to design, implement, and maintain security measures, incident response protocols, and automation tools to enhance the overall security posture of our organization. You will define, advocate and drive adoption for a common set of minimum security requirements and measure progress along the way. This is not a checkbox role, baselines are only meaningful if they are mapped to a reasonable threat, and the recommended mitigation is possible via battle-tested tools that exist today. You’ll set the bar and shape the future of our security standards, by iterating on your experience with engineering team challenges as they adopt practices and tools to develop securely.

• Experience with Kubernetes, Docker, and containerization (CNCF Kubernetes Administrator or equivalent).
• Proficient in at least one of Python, Golang, Java, or Rust. Comfortable working in an SDLC.

• Deep knowledge of Linux security primitives, systemd, packaging, container security and SELinux.Experience running Tier 1 services for 24/7 support.

PREFERRED QUALIFICATIONS

• Proven experience with large scale, highly available, distributed, and fault tolerant systems.
• Excellent understanding of operating systems concepts including multi-threading, memory management, networking and storage, performance and scale.
• Understanding of SRE principles, including monitoring, alerting, error budgets, fault analysis, and other common reliability engineering concepts.
• Understanding of MacOS security primitives is a bonus.

• Experience with Kubernetes, Docker, and containerization (CNCF Kubernetes Administrator or equivalent).
• Proficient in at least one of Python, Golang, Java, or Rust. Comfortable working in an SDLC.
• Deep knowledge of Linux security primitives, systemd, packaging, container security and SELinux.Experience running Tier 1 services for 24/7 support