Senior Security Engineer, Data Center Network

Do you want to help build some of the largest and most consequential enterprise

and customer technology systems in the world? Join Apple’s Information Systems

and Technology (IS&T) organization. IS&T is the engine behind everything Apple

does for customers and for the people who build for them. It’s Apple’s central

nervous system. Supporting 2.5 billion active Apple devices, processing billions

of secure transactions, and keeping the technology that defines modern life

running flawlessly, IS&T makes the impossible feel effortless.” Do you love

building solutions to handle global complexity and immense scale? Imagine what

you could do here. Infrastructure Services is part of IS&T and the foundation of

Apple's global network operations — managing data center equipment and systems

to deliver compute, storage, and networking services for teams across Apple,

including its internal developer community. From individual facilities to a

worldwide network, Infrastructure Services ensures the technology underneath

everything works without question.

DESCRIPTION

As part of the Data Center Network Security Engineering team, you will

collaborate closely with the SDI team to influence the design of next-generation

security products and features, and to operationalize innovative security

solutions that power Apple’s hyperscale network infrastructure. Our environment

extends well beyond Apple’s data centers and edge locations, encompassing Apple

Cloud platforms as well as third-party cloud environments. This role spans the

full spectrum of network security, from on-premises data centers to hybrid and

multi-cloud architectures. We are seeking a highly motivated engineer with a

strong passion for designing, implementing, and securing large-scale cloud and

data center network infrastructures. You will play a key role in protecting

hybrid environments by applying advanced network security controls, automation,

and industry best practices across on-prem, cloud, and multi-cloud deployments.

MINIMUM QUALIFICATIONS

Sophisticated knowledge of TCP/IP, routing protocols, security protocols and

large scale network features. Deep technical background in network-layer

security mechanisms Routing isolation Routing security Stateful and stateless

firewalls Network access control VPN and tunneling technologies Cloud-scale

networking security background in developing, enforcing, and maintaining

security frameworks, policies, and best practices. Experience deploying and

scaling overlay networking technologies (VXLAN, GRE, IPSec, etc)

PREFERRED QUALIFICATIONS

10+ years experience in building, securing, and deploying large scale data

center network & cloud environments CISSP or equivalent certification(s)

Extensive understanding of public & private cloud networking security

architecture & compute virtualization technologies Experience in OVS, Container

& Kube networking Engineering leadership experience Self-starter,

self-motivated, self-directed, and self-sufficient. Drives ideas from inception

to implementation Demonstrates consistent technical, organizational, and

industry-level awareness. Technical presentation and communication skills with

the ability to articulate concepts, designs and decisions to both technical and

non-technical audiences. Proficiency in one or more software languages (Swift,

Golang, Python, etc) Linux/Unix competence