Senior Security Software Engineer, Datacenter Infrastructure Security

Summary: We are the Foundational Security team in Apple Services Engineering (ASE). We secure the low-level foundations of Apple's datacenter fleet: hardware-backed trust, disk encryption, and the systems used to manage every server below the operating system. We're looking for a senior engineer to take technical ownership of the platform that manages our baseboard management controllers. You'll set its engineering and security bar, shape how access is granted and verified, and lead its move toward modern, standards-based management. You'll work closely with datacenter operations, SRE, hardware, network and detection teams, and become the go-to expert on managing Apple's fleet securely.

Description: This role owns the design, code and security of a privileged, availability-critical service. You'll write and review production code. You'll find and remove risk in how the service authenticates users, authorizes them and handles credentials, and you'll make privileged activity visible to the teams who detect misuse. You'll also help modernize how the fleet is managed, bringing along the many internal teams and tools that depend on the platform. Over time, you'll help define what secure out-of-band management looks like at Apple. That includes how access is segmented across environments, how firmware is delivered and trusted, and what we require of management controllers in future hardware. It also includes how access should work when the requester is an automated system rather than a person.

…