Job description

We are looking for a Kubernetes Security Engineer to help secure the next generation of Kubernetes Platforms at Apple. This is a hands-on technical role that involves implementing tooling, frameworks, and controls. You’ll be working with ASE Security, Platform SREs, and developers to develop and drive adoption of security initiatives across Kubernetes platforms at Apple. Deep, hands-on experience with Kubernetes environments at scale Extensive experience designing Kubernetes security solutions to solve platform-level security issues and concerns Software development skills in Golang and scripting skills in Python and experience running code at scale in production environments Bachelor's Degree or equivalent experience preferred Hands on experience with any of the following: * Policy as Code (OPA) * Workload Identity (SPIFFE/SPIRE) * Linux Security (SELinux, Seccomp, eBPF) * SIEM Tooling (DataBricks, Splunk) * GitOps (Flux, ArgoCD) * Supply-Chain Security (SBOMs, Syft, Grype) * Container Runtimes (containerd) * Image Signing (Notary, Cosign) * Admission Control (Gatekeeper, Kyverno, Pod Security Admission) * Cluster Configuration Monitoring (kube-bench) * Threat Detection (Falco) * Service Mesh (Cilium) * Operator/Controller development (controller-runtime) Kubernetes Certifications (CKS, CKAD, CKA) A track record of independently driving ambiguous, complex security initiatives Experience leveraging AI to accelerate work and approach new problems Strong documentation and communication skills

Requirements

Must-haves

Deep, hands-on experience with Kubernetes environments at scale
Extensive experience designing Kubernetes security solutions to solve platform-level security issues and concerns
Software development skills in Golang and scripting skills in Python and experience running code at scale in production environments
Hands on experience with any of the following:
Policy as Code (OPA)
Workload Identity (SPIFFE/SPIRE)
Linux Security (SELinux, Seccomp, eBPF)
SIEM Tooling (DataBricks, Splunk)
GitOps (Flux, ArgoCD)
Supply-Chain Security (SBOMs, Syft, Grype)
Container Runtimes (containerd)
Image Signing (Notary, Cosign)
Admission Control (Gatekeeper, Kyverno, Pod Security Admission)
Cluster Configuration Monitoring (kube-bench)
Threat Detection (Falco)
Service Mesh (Cilium)
Operator/Controller development (controller-runtime)
Kubernetes Certifications (CKS, CKAD, CKA)
A track record of independently driving ambiguous, complex security initiatives
Experience leveraging AI to accelerate work and approach new problems
Strong documentation and communication skills

Nice-to-haves

Bachelor's Degree or equivalent experience preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

kubernetesgolangpythonai

Platform: apple
Effort: medium