About the role

What will you do at Apple?

At Apple, our Platform Architecture group is responsible for connecting our

hardware, software, and servers into one unified system. You’ll join a team of

architects who are dedicated to securing the world’s most advanced consumer

devices. Our products are trusted for storing personal data, and our goal is to

ensure cutting-edge safeguards for our users. The services our team supports

exist to make those products secure: they establish the trust each device

depends on, from the factory floor through every day in a customer’s hands.

We’re looking for dedicated and inspired individuals to help improve on the

security of Apple’s products.

DESCRIPTION

In this role, you will

define the architecture and oversee the operation of
distributed systems that set and enforce security policy for the development,
manufacture, deployment, and operation of Apple products, ultimately driving
continuous security improvements for these products. This role is largely
self-directed and suits an engineer with deep hands-on experience building and
operating secure systems who is ready to grow into an architectural role.
MINIMUM QUALIFICATIONS
Bachelor’s degree in Computer Science, Computer Engineering, related engineering
degree or equivalent job-related experience. Experience applying security
practices to the design, development, or operation of production services.
Experience with common programming languages such as Python or Go. Experience
conducting security architecture reviews, threat modeling, or identifying
vulnerabilities in complex distributed systems. Experience with cryptography and
security protocols, including at least two of the following: PKI, TLS, Key
Management, Secure Boot, or Authentication/Authorization.
PREFERRED QUALIFICATIONS
10+ years of relevant industry experience. Ability to understand complex
systems, employing strong critical thinking skills to identify security issues
in implementation and architecture. Knowledge of cryptographic principles (e.g.,
symmetric vs asymmetric crypto, confidentiality vs integrity) and technologies
such as authentication and authorization, key management, TLS, certificate
lifecycle management, secure boot, and PKI. Experience designing and developing
secure services and scalable infrastructure for highly available applications,
such as distributed systems, micro-services, and cloud platforms. Familiarity
with, or practical application of, threat modeling methodologies such as STRIDE
or Trike. DevOps experience, such as continuous integration/continuous
deployment (CI/CD), infrastructure as code (IaC), or automation of development,
testing, and deployment pipelines. Ability to track emerging security trends and
threats and proactively incorporate them into PKI architecture and signing
policy to stay ahead of evolving risks. Experience with systems programming
languages such as C or C++.

Which skills does this role require?

Security ArchitecturePythonGoCryptographyC++Platform ArchitectureSecurity EngineeringSecurity PolicySystem Architecture

Make your next move

Build a shortlist and prepare

Identify the requirements you can demonstrate, then choose examples from your work to discuss with the hiring team.

Build a focused shortlist before you applyCompare role requirements with your experience and give each application a clear reason.
Practice explaining your experience in an interviewRehearse your answers before meeting the hiring team.

Review the responsibilities and requirements before adding an opening to your shortlist.