Senior System Security Software Engineer, Platform Attestation

The cloudOS System Software Engineering team is at the forefront of developing secure server software and is responsible for building the Apple Silicon server platform that powers Private Cloud Compute. We own the trust boundary between the physical hardware in our data centers and the services that run on it: before a node can serve a user request, we cryptographically prove its authenticity and integrity. We are looking for an exceptional security engineer with experience architecting and developing low-level, secure software to build new technologies to support Apple’s product security and customer privacy principles. In this role, you will be part of a team that builds and maintains system software such as kernel drivers, runtime libraries, frameworks, and daemons, and you will own the attestation architecture for the server platform. You will bring new chassis designs into attestation from the ground up, defining what is measured, how component identities are sealed during manufacturing, and how they are verified after deployment. And you will build the services that turn those measurements into one authoritative answer to whether every machine in our data centers is in a known good state. The right candidate will have a successful track record of securing compute platforms and building end-to-end security solutions. You should have a strong mix of educational and practical experience, be comfortable working from silicon and firmware up through the services that verify them, and have a passion for diving head first into challenging problems.