Senior Security Engineer, Infrastructure Services

Apple is where individual imaginations gather together, committing to the values that lead to great work. Every new product we build, service we create, or Apple Store experience we deliver is the result of us making each other's ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world, changing lives for the better. It's the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in, we can do the best work of our lives. Here, you'll do more than join something - you'll add something.

People at Apple don't just build products - they craft the kind of experience that has revolutionized entire industries. The diverse collection of our people and their ideas encourage innovation in everything we do. Imagine what you could do here! Join Apple, and help us leave the world better than we found it.

Apple's Network Infrastructure is a critical foundation in delivering Apple's services (such as iCloud, iTunes, Siri, Maps, Private Cloud Compute) to billions of customers, and its employees. Apple's Data Center Networking team is responsible for all aspect of the Network Infrastructure, from Operations to Architecture, thats deployed globally across Apple's Data Centers and Edge locations. We are responsible for delivering a network that can match Apple's scale, reliability and security goals.

We work closely with Apple's other Infrastructure organizations, Hardware and Software Architecture teams to influence, build and operate Apple's Infrastructure. Our influences can range anywhere from Data Center Network Fabrics to a Hardware System Design. We listen to different perspectives, help surface innovative ideas, and drive decisions that move us forward.

Description

As part of the Data Center Network Security Engineering team, you will collaborate closely with the SDI team to influence the design of next-generation security products and features, and to operationalize innovative security solutions that power Apple's hyperscale network infrastructure. Our environment extends well beyond Apple's data centers and edge locations, encompassing Apple Cloud platforms as well as third-party cloud environments.

This role spans the full spectrum of network security, from on-premises data centers to hybrid and multi-cloud architectures. We are seeking a highly motivated engineer with a strong passion for designing, implementing, and securing large-scale cloud and data center network infrastructures. You will play a key role in protecting hybrid environments by applying advanced network security controls, automation, and industry best practices across on-prem, cloud, and multi-cloud deployments.

","responsibilities":"Sophisticated knowledge of TCP/IP, routing protocols, security protocols and large scale network features.

Deep technical background in network-layer security mechanisms

Routing isolation

Routing security

Stateful and stateless firewalls

Network access control

VPN and tunneling technologies

Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices.

Experience deploying and scaling overlay networking technologies (VXLAN, GRE, IPSec, etc)

Preferred Qualifications

10+ years experience in building, securing, and deploying large scale data center network & cloud environments

CISSP or equivalent certification(s)

Extensive understanding of public & private cloud networking security architecture & compute virtualization technologies

Experience in OVS, Container & Kube networking

Engineering leadership experience

Self-starter, self-motivated, self-directed, and self-sufficient. Drives ideas from inception to implementation

Demonstrates consistent technical, organizational, and industry-level awareness.

Technical presentation and communication skills with the ability to articulate concepts, designs and decisions to both technical and non-technical audiences.

Proficiency in one or more software languages (Swift, Golang, Python, etc)

Linux/Unix competence

Minimum Qualifications

Sophisticated knowledge of TCP/IP, routing protocols, security protocols and large scale network features.

Deep technical background in network-layer security mechanisms

Routing isolation

Routing security

Stateful and stateless firewalls

Network access control

VPN and tunneling technologies

Cloud-scale networking security background in developing, enforcing, and maintaining security frameworks, policies, and best practices.

Experience deploying and scaling overlay networking technologies (VXLAN, GRE, IPSec, etc)

Pay & Benefits

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $184,700 and $324,800, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.