{"schemaVersion":"jobsearcher.job.v1","id":"fd12cb79c4db053f48cb0e91","url":"https://jobsearcher.com/jobs/fd12cb79c4db053f48cb0e91","canonicalUrl":"https://jobsearcher.com/jobs/fd12cb79c4db053f48cb0e91","title":"Senior Security Software Engineer, Datacenter Infrastructure Security","description":"Summary\n\nWe are the Foundational Security team in Apple Services Engineering (ASE). We secure the low-level foundations of Apple's datacenter fleet: hardware-backed trust, disk encryption, and the systems used to manage every server below the operating system. We're looking for a senior engineer to take technical ownership of the platform that manages our baseboard management controllers. You'll set its engineering and security bar, shape how access is granted and verified, and lead its move toward modern, standards-based management. You'll work closely with datacenter operations, SRE, hardware, network and detection teams, and become the go-to expert on managing Apple's fleet securely.\n\nDescription\n\nThis role owns the design, code and security of a privileged, availability-critical service. You'll write and review production code. You'll find and remove risk in how the service authenticates users, authorizes them and handles credentials, and you'll make privileged activity visible to the teams who detect misuse. You'll also help modernize how the fleet is managed, bringing along the many internal teams and tools that depend on the platform. Over time, you'll help define what secure out-of-band management looks like at Apple. That includes how access is segmented across environments, how firmware is delivered and trusted, and what we require of management controllers in future hardware. It also includes how access should work when the requester is an automated system rather than a person.\n\nMinimum Qualifications\n\n8+ years of software engineering experience, including end-to-end ownership of a production system or platform\nDeep proficiency in Go, with 5+ years writing production Go code.\nExperience building security telemetry for SIEM and detection pipelines (e.g., Splunk, OpenTelemetry)\nHands-on experience with authentication and authorization at scale, including PKI, mTLS, X.509 certificate identity and fine-grained access control\nExperience with Swift, and Rust\nBS/MS in Computer Science or equivalent experience\n\nPreferred Qualifications\n\nHands-on experience with server management technologies such as IPMI, DMTF Redfish, OpenBMC, or vendor BMCs (e.g., HPE iLO, Dell iDRAC)\nExperience finding and fixing security flaws in networked services through code review, threat modeling or security testing\nA track record of technical leadership: driving architecture decisions and cross-team migrations, mentoring engineers, and explaining security trade-offs to engineers and leadership\nExperience with gRPC and Protocol Buffers, and with running PostgreSQL in production\nExperience managing the lifecycle of secrets and credentials at fleet scale, including rotation and emergency access\nExperience building and operating highly available, distributed services that other teams depend on\nFamiliarity with network segmentation and zero-trust access patterns, such as identity-aware proxies\nKnowledge of firmware security, including secure boot, firmware signing and updates, TPMs and hardware roots of trust\nHands-on experience using AI coding assistants on a production codebase\n\nApple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant\n\nAt Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.\n\nLearn about accessibility in Apple’s workplace\n\nLearn about reasonable accommodations for job applicants\n\nApple accepts applications to this posting on an ongoing basis.","company":"Apple","rawCompany":"apple","city":"Austin","state":"TX","isRemote":false,"isActive":true,"createdAt":"2026-10-21T11:51:19.061Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1252.00","title":"Software Developers","slug":"software-developers"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"513210","title":"Software Publishers","slug":"software-publishers"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Senior Security Software Engineer, Datacenter Infrastructure Security","description":"Summary\n\nWe are the Foundational Security team in Apple Services Engineering (ASE). We secure the low-level foundations of Apple's datacenter fleet: hardware-backed trust, disk encryption, and the systems used to manage every server below the operating system. We're looking for a senior engineer to take technical ownership of the platform that manages our baseboard management controllers. You'll set its engineering and security bar, shape how access is granted and verified, and lead its move toward modern, standards-based management. You'll work closely with datacenter operations, SRE, hardware, network and detection teams, and become the go-to expert on managing Apple's fleet securely.\n\nDescription\n\nThis role owns the design, code and security of a privileged, availability-critical service. You'll write and review production code. You'll find and remove risk in how the service authenticates users, authorizes them and handles credentials, and you'll make privileged activity visible to the teams who detect misuse. You'll also help modernize how the fleet is managed, bringing along the many internal teams and tools that depend on the platform. Over time, you'll help define what secure out-of-band management looks like at Apple. That includes how access is segmented across environments, how firmware is delivered and trusted, and what we require of management controllers in future hardware. It also includes how access should work when the requester is an automated system rather than a person.\n\nMinimum Qualifications\n\n8+ years of software engineering experience, including end-to-end ownership of a production system or platform\nDeep proficiency in Go, with 5+ years writing production Go code.\nExperience building security telemetry for SIEM and detection pipelines (e.g., Splunk, OpenTelemetry)\nHands-on experience with authentication and authorization at scale, including PKI, mTLS, X.509 certificate identity and fine-grained access control\nExperience with Swift, and Rust\nBS/MS in Computer Science or equivalent experience\n\nPreferred Qualifications\n\nHands-on experience with server management technologies such as IPMI, DMTF Redfish, OpenBMC, or vendor BMCs (e.g., HPE iLO, Dell iDRAC)\nExperience finding and fixing security flaws in networked services through code review, threat modeling or security testing\nA track record of technical leadership: driving architecture decisions and cross-team migrations, mentoring engineers, and explaining security trade-offs to engineers and leadership\nExperience with gRPC and Protocol Buffers, and with running PostgreSQL in production\nExperience managing the lifecycle of secrets and credentials at fleet scale, including rotation and emergency access\nExperience building and operating highly available, distributed services that other teams depend on\nFamiliarity with network segmentation and zero-trust access patterns, such as identity-aware proxies\nKnowledge of firmware security, including secure boot, firmware signing and updates, TPMs and hardware roots of trust\nHands-on experience using AI coding assistants on a production codebase\n\nApple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant\n\nAt Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.\n\nLearn about accessibility in Apple’s workplace\n\nLearn about reasonable accommodations for job applicants\n\nApple accepts applications to this posting on an ongoing basis.","datePosted":"2026-10-21T11:51:19.061Z","dateModified":"2026-10-21T11:51:19.061Z","hiringOrganization":{"@type":"Organization","name":"Apple","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Austin","addressRegion":"TX","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"fd12cb79c4db053f48cb0e91"},"url":"https://jobsearcher.com/jobs/fd12cb79c4db053f48cb0e91"}}