JobCubby JobCubby
Sign up
Apple

Kubernetes Security Engineer

Apple Austin, Texas, United States

Computers and Electronics Manufacturing · 10,001+ employees

5 h ago
kubernetes Senior (5-10 yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

You will implement security tooling, frameworks, and controls to protect large-scale Kubernetes infrastructure. You will collaborate with security teams, platform engineers, and developers to drive security initiatives across Apple's platforms.

What they look for

Kubernetes Golang Python Security Engineering Policy as Code Workload Identity Linux Security eBPF SIEM Tooling GitOps Supply-Chain Security Container Runtimes Image Signing Admission Control Threat Detection Service Mesh

Requirements

Candidates must have deep hands-on experience with Kubernetes at scale and proficiency in Golang and Python. A bachelor's degree or equivalent experience is preferred, along with a strong background in platform-level security design.

Full description

The Apple Service Engineering (ASE) Security team secures the systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, and Maps). We secure the foundation on which Apple’s software developers build the products that our customers love. At the heart of the foundation is Kubernetes, which powers a growing amount of what we do. We are looking for a passionate and talented Kubernetes Security Engineer to help secure our complex and large-scale Kubernetes infrastructure. This is a unique opportunity to make a real impact in securing the platforms that serve millions of people each day.

Description

We are looking for a Kubernetes Security Engineer to help secure the next generation of Kubernetes Platforms at Apple. This is a hands-on technical role that involves implementing tooling, frameworks, and controls. You’ll be working with ASE Security, Platform SREs, and developers to develop and drive adoption of security initiatives across Kubernetes platforms at Apple.

Minimum Qualifications

Deep, hands-on experience with Kubernetes environments at scale Extensive experience designing Kubernetes security solutions to solve platform-level security issues and concerns Software development skills in Golang and scripting skills in Python and experience running code at scale in production environments Bachelor's Degree or equivalent experience preferred

Preferred Qualifications

Hands on experience with any of the following: * Policy as Code (OPA) * Workload Identity (SPIFFE/SPIRE) * Linux Security (SELinux, Seccomp, eBPF) * SIEM Tooling (DataBricks, Splunk) * GitOps (Flux, ArgoCD) * Supply-Chain Security (SBOMs, Syft, Grype) * Container Runtimes (containerd) * Image Signing (Notary, Cosign) * Admission Control (Gatekeeper, Kyverno, Pod Security Admission) * Cluster Configuration Monitoring (kube-bench) * Threat Detection (Falco) * Service Mesh (Cilium) * Operator/Controller development (controller-runtime)

Kubernetes Certifications (CKS, CKAD, CKA) A track record of independently driving ambiguous, complex security initiatives Experience leveraging AI to accelerate work and approach new problems Strong documentation and communication skills

Similar roles