Kubernetes Security Engineer

Apple’s ASE Security team is seeking a Kubernetes Security Engineer to strengthen the security posture of large-scale Kubernetes infrastructure. This hands-on position focuses on building and deploying security tooling, frameworks, and controls in partnership with ASE Security, Platform SREs, and developers.

Responsibilities

• Collaborate with internal security teams to influence standards, products, and adoption across Kubernetes environments
• Drive alignment between security priorities and Kubernetes SRE and developer goals
• Design and develop security solutions for Kubernetes platforms in collaboration with SRE teams
• Deploy security solutions while providing monitoring and documentation to support operational readiness

Requirements

• Hands-on experience with Policy as Code (OPA)
• Hands-on experience with Workload Identity (SPIFFE/SPIRE)
• Hands-on experience with Linux Security (SELinux, Seccomp, eBPF)
• Hands-on experience with SIEM tooling (DataBricks, Splunk)
• Hands-on experience with GitOps (Flux, ArgoCD)
• Hands-on experience with Supply-Chain Security (SBOMs, Syft, Grype)
• Hands-on experience with Container runtimes (containerd)
• Hands-on experience with Image signing (Notary, Cosign)
• Hands-on experience with Admission Control (Gatekeeper, Kyverno, Pod Security Admission)
• Hands-on experience with Cluster configuration monitoring (kube-bench)
• Hands-on experience with Threat detection (Falco)
• Hands-on experience with Service mesh (Cilium)
• Hands-on experience with Operator/Controller development (controller-runtime)
• Holds Kubernetes certifications (CKS, CKAD, CKA)
• Demonstrated ability to independently drive ambiguous and complex security initiatives
• Experience leveraging AI to accelerate work and approach new problems
• Strong documentation and communication skills
• Deep, hands-on experience with Kubernetes environments at scale
• Extensive experience designing Kubernetes security solutions to address platform-level security concerns
• Software development skills in Golang, plus scripting skills in Python, with experience running code at scale in production environments

Technologies

Kubernetes, OPA, SPIFFE/SPIRE, SELinux, Seccomp, eBPF, DataBricks, Splunk, Flux, ArgoCD, SBOMs, Syft, Grype, containerd, Notary, Cosign, Gatekeeper, Kyverno, Pod Security Admission, kube-bench, Falco, Cilium, controller-runtime, Golang, Python, CKS, CKAD, CKA

Location and Education

Location: Austin, TX (onsite).
Education: Bachelor’s Degree or equivalent experience preferred.