Senior Security Engineer, Data Center Network

Apple is where individual imaginations gather together, committing to the values

that lead to great work. Every new product we build, service we create, or Apple

Store experience we deliver is the result of us making each other’s ideas

stronger. That happens because every one of us shares a belief that we can make

something wonderful and share it with the world, changing lives for the better.

It’s the diversity of our people and their thinking that inspires the innovation

that runs through everything we do. When we bring everybody in, we can do the

best work of our lives. Here, you’ll do more than join something — you’ll add

something. People at Apple don’t just build products — they craft the kind of

experience that has revolutionized entire industries. The diverse collection of

our people and their ideas encourage innovation in everything we do. Imagine

what you could do here! Join Apple, and help us leave the world better than we

found it. Apple’s Network Infrastructure is a critical foundation in delivering

Apple’s services (such as iCloud, iTunes, Siri, Maps, Private Cloud Compute) to

billions of customers, and its employees. Apple’s Data Center Networking team is

responsible for all aspect of the Network Infrastructure, from Operations to

Architecture, thats deployed globally across Apple’s Data Centers and Edge

locations. We are responsible for delivering a network that can match Apple’s

scale, reliability and security goals. We work closely with Apple’s other

Infrastructure organizations, Hardware and Software Architecture teams to

influence, build and operate Apple’s Infrastructure. Our influences can range

anywhere from Data Center Network Fabrics to a Hardware System Design. We listen

to different perspectives, help surface innovative ideas, and drive decisions

that move us forward.

DESCRIPTION

As part of the Data Center Network Security Engineering team, you will

collaborate closely with the SDI team to influence the design of next-generation

security products and features, and to operationalize innovative security

solutions that power Apple’s hyperscale network infrastructure. Our environment

extends well beyond Apple’s data centers and edge locations, encompassing Apple

Cloud platforms as well as third-party cloud environments. This role spans the

full spectrum of network security, from on-premises data centers to hybrid and

multi-cloud architectures. We are seeking a highly motivated engineer with a

strong passion for designing, implementing, and securing large-scale cloud and

data center network infrastructures. You will play a key role in protecting

hybrid environments by applying advanced network security controls, automation,

and industry best practices across on-prem, cloud, and multi-cloud deployments.

MINIMUM QUALIFICATIONS

Sophisticated knowledge of TCP/IP, routing protocols, security protocols and

large scale network features. Deep technical background in network-layer

security mechanisms Routing isolation Routing security Stateful and stateless

firewalls Network access control VPN and tunneling technologies Cloud-scale

networking security background in developing, enforcing, and maintaining

security frameworks, policies, and best practices. Experience deploying and

scaling overlay networking technologies (VXLAN, GRE, IPSec, etc)

PREFERRED QUALIFICATIONS

10+ years experience in building, securing, and deploying large scale data

center network & cloud environments CISSP or equivalent certification(s)

Extensive understanding of public & private cloud networking security

architecture & compute virtualization technologies Experience in OVS, Container

& Kube networking Engineering leadership experience Self-starter,

self-motivated, self-directed, and self-sufficient. Drives ideas from inception

to implementation Demonstrates consistent technical, organizational, and

industry-level awareness. Technical presentation and communication skills with

the ability to articulate concepts, designs and decisions to both technical and

non-technical audiences. Proficiency in one or more software languages (Swift,

Golang, Python, etc) Linux/Unix competence