- We are the IAM team for the Apple Services Engineering org.. Our team’s primary responsibility
- is to manage and establish identities for software applications, services, and containers to
- securely access cloud resources, ensuring proper authentication and authorization for these
- workloads without requiring manual credential management. We are expanding our team and
- looking to add a Senior Staff Software Engineer who will play a critical role in ensuring our
- customers adhere to the latest and most effective security practices for addressing identity. We
- are looking for a passionate and talented technical lead engineer who will focus on creating
- fundamental security services, addressing identity challenges on a large scale within the ASE
- organization. Success in this role requires individuals to possess a blend of profound technical
- expertise, extensive knowledge in security, and substantial experience in large-scale operations.
- In the role of Senior Software Engineer, you will play a crucial part in ensuring that our
- customers adhere to the latest and most effective security practices for addressing identity and
- authorization challenges. Collaborating with cross-functional teams, you will be responsible for
- designing and implementing systems to bolster our overall security posture throughout the
- organization. Your duties will include defining, advocating, and driving the adoption of a
- standardized set of minimum security requirements while monitoring progress. You will set high
- standards and influence the future of our security protocols, guiding engineering teams as they
- incorporate secure practices and tools into their development processes.
- 15 years of software development or production operations experience in a large-scale
- environment
- Strong programming skills in Golang, as you'll be working extensively with Go based
- applications
- Proven experience building and operating large scale, highly available, distributed, and fault
- tolerant systems
- Experience with Kubernetes, Docker, and containerization (CNCF Kubernetes Developer or
- equivalent)
- Knowledge of securing APIs, including input validation, authentication, and authorization
- mechanisms for RESTful and gRPC APIs
- BS/MS in Computer Science or equivalent experience
- Hands-on experience with Systems, including the ability to configure and troubleshoot system initialization processes
- Familiarity with policy-based authorization frameworks and languages such as Open Policy Agent (OPA) and Rego
- Understanding of network security principles, protocols, and technologies, including firewalls, VPNs, and secure communication channels
- Familiarity with incident response processes and the ability to respond to security incidents effectively
- Knowledge of cryptographic algorithms and protocols for securing data, including TLS/SSL, digital signatures, hashing, and encryption
- Knowledge of authentication and authorization mechanisms, including OAuth, JWT, and other identity management protocols
Job description provided by Apple.
View the original posting
