Job description

This role owns the design, code and security of a privileged, availability-critical service. You'll write and review production code. You'll find and remove risk in how the service authenticates users, authorizes them and handles credentials, and you'll make privileged activity visible to the teams who detect misuse. You'll also help modernize how the fleet is managed, bringing along the many internal teams and tools that depend on the platform. Over time, you'll help define what secure out-of-band management looks like at Apple. That includes how access is segmented across environments, how firmware is delivered and trusted, and what we require of management controllers in future hardware. It also includes how access should work when the requester is an automated system rather than a person. 8+ years of software engineering experience, including end-to-end ownership of a production system or platform Deep proficiency in Go, with 5+ years writing production Go code. Experience building security telemetry for SIEM and detection pipelines (e.g., Splunk, OpenTelemetry) Hands-on experience with authentication and authorization at scale, including PKI, mTLS, X.509 certificate identity and fine-grained access control Experience with Swift, and Rust BS/MS in Computer Science or equivalent experience Hands-on experience with server management technologies such as IPMI, DMTF Redfish, OpenBMC, or vendor BMCs (e.g., HPE iLO, Dell iDRAC) Experience finding and fixing security flaws in networked services through code review, threat modeling or security testing A track record of technical leadership: driving architecture decisions and cross-team migrations, mentoring engineers, and explaining security trade-offs to engineers and leadership Experience with gRPC and Protocol Buffers, and with running PostgreSQL in production Experience managing the lifecycle of secrets and credentials at fleet scale, including rotation and emergency access Experience building and operating highly available, distributed services that other teams depend on Familiarity with network segmentation and zero-trust access patterns, such as identity-aware proxies Knowledge of firmware security, including secure boot, firmware signing and updates, TPMs and hardware roots of trust Hands-on experience using AI coding assistants on a production codebase

Requirements

Must-haves

8+ years of software engineering experience, including end-to-end ownership of a production system or platform
Deep proficiency in Go, with 5+ years writing production Go code.
Experience building security telemetry for SIEM and detection pipelines (e.g., Splunk, OpenTelemetry)
Hands-on experience with authentication and authorization at scale, including PKI, mTLS, X.509 certificate identity and fine-grained access control
Experience with Swift, and Rust
BS/MS in Computer Science or equivalent experience
Hands-on experience with server management technologies such as IPMI, DMTF Redfish, OpenBMC, or vendor BMCs (e.g., HPE iLO, Dell iDRAC)
Experience finding and fixing security flaws in networked services through code review, threat modeling or security testing
A track record of technical leadership: driving architecture decisions and cross-team migrations, mentoring engineers, and explaining security trade-offs to engineers and leadership
Experience with gRPC and Protocol Buffers, and with running PostgreSQL in production
Experience managing the lifecycle of secrets and credentials at fleet scale, including rotation and emergency access
Experience building and operating highly available, distributed services that other teams depend on
Familiarity with network segmentation and zero-trust access patterns, such as identity-aware proxies
Knowledge of firmware security, including secure boot, firmware signing and updates, TPMs and hardware roots of trust
Hands-on experience using AI coding assistants on a production codebase

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goswiftrustai

Platform: apple
Effort: medium