Architect, Perimeter and Network Security

What you'll do

• Define and drive the long-term security architecture and roadmap for Apple's perimeter and network security platform.
• Design and architect WAF rule engines, DDoS mitigation, bot detection, and TLS policy management at scale.
• Own the security architecture across all proxy tiers, including edge, service mesh, and API/AI security gateways.
• Lead the architecture of security controls across TCP, UDP, HTTP/HTTPS, and TLS protocols.
• Write production-quality code and prototype solutions to raise the technical bar for the engineering team.
• Author security architecture documents and establish design standards and patterns for the broader engineering organization.
• Partner with application teams to understand traffic patterns and design integrated security solutions.
• Identify and address security architecture gaps, systemic risks, and technical debt before they become production vulnerabilities.

What we're looking for

• Bachelor's degree in Computer Science, Computer Engineering, or equivalent.
• 15+ years of hands-on software engineering experience with significant time in security architecture or senior technical leadership roles.
• Expert-level understanding of WAF design, DDoS mitigation, bot detection, TLS/mTLS, TCP/IP, HTTP/HTTPS, QUIC, and DNS security.
• Deep experience with proxy technologies including NGINX, Envoy, and HAProxy across edge, service mesh, and API/AI security gateway tiers.
• Experience designing orchestration/control plane systems for security policy distribution across distributed infrastructure at scale.
• Proven ability to architect systems spanning on-premises and public cloud (GCP, AWS) with high availability and fault tolerance.
• Strong proficiency in Java/J2EE for building backend platforms and writing production-quality code.
• M.S. or Ph.D. in Computer Science, Electrical Engineering, or equivalent experience (preferred).