Senior Security Software Engineer, Datacenter Infrastructure Security

We are the Foundational Security team in Apple Services Engineering (ASE). We secure the low-level foundations of Apples datacenter fleet: hardware-backed trust disk encryption and the systems used to manage every server below the operating looking for a senior engineer to take technical ownership of the platform that manages our baseboard management controllers. Youll set its engineering and security bar shape how access is granted and verified and lead its move toward modern standards-based management. Youll work closely with datacenter operations SRE hardware network and detection teams and become the go-to expert on managing Apples fleet securely.n

This role owns the design code and security of a privileged availability-critical service. Youll write and review production code. Youll find and remove risk in how the service authenticates users authorizes them and handles credentials and youll make privileged activity visible to the teams who detect misuse. Youll also help modernize how the fleet is managed bringing along the many internal teams and tools that depend on the time youll help define what secure out-of-band management looks like at Apple. That includes how access is segmented across environments how firmware is delivered and trusted and what we require of management controllers in future hardware. It also includes how access should work when the requester is an automated system rather than a person.

8 years of software engineering experience including end-to-end ownership of a production system or platformnDeep proficiency in Go with 5 years writing production Go building security telemetry for SIEM and detection pipelines (e.g. Splunk OpenTelemetry)nHands-on experience with authentication and authorization at scale including PKI mTLS X.509 certificate identity and fine-grained access controlnExperience with Swift and RustnBS/MS in Computer Science or equivalent experience

Hands-on experience with server management technologies such as IPMI DMTF Redfish OpenBMC or vendor BMCs (e.g. HPE iLO Dell iDRAC)nExperience finding and fixing security flaws in networked services through code review threat modeling or security testingnA track record of technical leadership: driving architecture decisions and cross-team migrations mentoring engineers and explaining security trade-offs to engineers and leadershipnExperience with gRPC and Protocol Buffers and with running PostgreSQL in productionnExperience managing the lifecycle of secrets and credentials at fleet scale including rotation and emergency accessnExperience building and operating highly available distributed services that other teams depend onnFamiliarity with network segmentation and zero-trust access patterns such as identity-aware proxiesnKnowledge of firmware security including secure boot firmware signing and updates TPMs and hardware roots of trustnHands-on experience using AI coding assistants on a production codebase