Security Site Reliability Engineer - Apple Service Engineering

Summary

People at Apple don't just build products, they craft the kind of experiences that have revolutionized entire industries. The diverse collection of our people and their ideas inspire innovation in everything we do. Imagine what you could do here. Join Apple, and help us leave the world better than we found it. The Apple Service Engineering (ASE) team builds and provides the systems and infrastructure that fuel Apple's services, including iCloud, iTunes, Siri, and Maps. We are the foundation on which Apple's software developers build the products our customers love.

We are looking for a Site Reliability Engineer to join ASE Security SRE, working in close partnership with development teams to operate and mature services spanning host access, disk encryption, and fleet-wide security agents. These services are foundational to how Apple's infrastructure is secured and operated at scale. This role works day to day with the engineering teams who build these services, sharing ownership of their reliability, operational quality, and on-call.

About the role

We are seeking a Site Reliability Engineer to join a team working directly alongside development partners across host access, disk encryption, and fleet-wide security tooling. You will share responsibility for the reliability, operability, and security posture of the services in this area, contributing from design and planning through to production operation and incident response. You will have a seat in planning and design reviews, and be accountable for operational quality alongside the engineers who build the service.

You will help define and drive adoption of sound operational practices, grounded in what actually works for the team and the threat model in front of them. You will bring deep comfort with host and fleet level operations, and the practical realities of rolling out and operating security tooling across a large, heterogeneous environment.

Responsibilities

• Partner with development teams on the design, rollout, and operation of host and fleet level security tooling
• Own or co-own operational health, deployment safety, and incident response for services and agents in the aligned area
• Participate in on-call for the services you support, alongside the development team
• Drive improvements to fleet-wide deployment, rollback, and coverage mechanisms as a standing part of the team's engineering work
• Represent operational health in planning and review forums for the area

Minimum Qualifications

• Bachelor's degree in Computer Science, a related engineering field, or equivalent experience. Advanced degree preferred
• 7+ years in a Site Reliability Engineering or infrastructure focused role
• Significant experience in at least one of: Swift, Java, Rust, Golang, C or C++
• Deep knowledge of Linux security primitives, systems internals, packaging, and container security
• Strong understanding of distributed systems design patterns and their security implications
• Experience running Tier 1 services with 24/7 support expectations
• *Strong understanding of operating systems concepts including multi-threading, memory management, networking, storage, and systems application performance tuning
• Knowledge of common infrastructure components including network architecture, server fleet provisioning and configuration, and load balancing
• In-depth knowledge of technologies such as TLS/SSL, TCP/IP, and X.509 certificates

Preferred Qualifications

• Experience with fleet-wide agent or security tooling deployment across heterogeneous environments
• Understanding of macOS security primitives
• Strong grasp of SRE principles including monitoring, alerting, error budgets, and fault analysis
• Experience with Kubernetes and virtualized infrastructure at scale