Kubernetes Security Engineer

Apple’s ASE Security team is seeking a Kubernetes Security Engineer to strengthen the security of large-scale Kubernetes infrastructure. This is a hands-on role focused on building and deploying security tooling, frameworks, and controls in partnership with ASE Security, Platform SREs, and developers.

Key Responsibilities

• Collaborate with internal security teams on standards, security products, and adoption
• Drive alignment between security priorities, Kubernetes SREs, and developers
• Design and develop security solutions for Kubernetes platforms in collaboration with SRE teams
• Deploy security solutions along with monitoring and documentation to support operational use

Required Skills and Experience

• Hands-on experience with Policy as Code (OPA)
• Hands-on experience with Workload Identity (SPIFFE/SPIRE)
• Hands-on experience with Linux security (SELinux, Seccomp, eBPF)
• Hands-on experience with SIEM tooling (DataBricks, Splunk)
• Hands-on experience with GitOps (Flux, ArgoCD)
• Hands-on experience with Supply-Chain Security (SBOMs, Syft, Grype)
• Hands-on experience with Container runtimes (containerd)
• Hands-on experience with Image signing (Notary, Cosign)
• Hands-on experience with Admission control (Gatekeeper, Kyverno, Pod Security Admission)
• Hands-on experience with Cluster configuration monitoring (kube-bench)
• Hands-on experience with Threat detection (Falco)
• Hands-on experience with Service mesh (Cilium)
• Hands-on experience with Operator or controller development (controller-runtime)
• Hold Kubernetes certifications (CKS, CKAD, CKA)
• Demonstrate a track record of independently driving ambiguous, complex security initiatives
• Experience leveraging AI to accelerate work and approach new problems
• Strong documentation and communication skills
• Deep, hands-on experience with Kubernetes environments at scale
• Extensive experience designing Kubernetes security solutions for platform-level security challenges
• Software development skills in Golang and scripting skills in Python, with experience running code at scale in production environments

Relevant Technologies

• Kubernetes
• OPA
• SPIFFE/SPIRE
• SELinux, Seccomp, eBPF
• DataBricks, Splunk
• Flux, ArgoCD
• SBOMs, Syft, Grype
• containerd
• Notary, Cosign
• Gatekeeper, Kyverno, Pod Security Admission
• kube-bench
• Falco
• Cilium
• controller-runtime
• Golang, Python
• CKS, CKAD, CKA

Education

Bachelor’s Degree or equivalent experience preferred.

Location and Work Setup

Austin, TX (onsite).