← All roles

Senior Network Security Engineer, Infrastructure Services

Apple· IS&T / Infrastructure Services
Apply on company site
Hybrid (Austin Metro Area)Full-timePosted 3w ago

About the role

Senior-level network security engineer responsible for designing, deploying, and operating resilient enterprise network services at global scale. Focused on Zero Trust, multi-profile VPNs, hybrid SD-WAN, secure connectivity for remote sites and partners, and applying software engineering and AI-driven automation to improve reliability and security.

Responsibilities

  • Engineer Zero Trust Multi-Profile VPN Services
  • Design and scale multi-profile VPN architectures that advance Apple's Zero Trust journey, securing access across diverse user populations, device postures, and business functions.
  • Design Resilient Hybrid SD-WAN Fabrics
  • Architect and deploy resilient hybrid SD-WAN infrastructure that delivers secure, reliable connectivity for remote facilities, 3PL logistics sites, and third-party partner locations globally.
  • Establish Secure Connectivity for Partners & Remote Sites
  • Build and operationalize secure connectivity solutions for remote facilities, supply chain partners, and third-party integrations, ensuring consistent security posture across the ecosystem.
  • Drive Automation & Agentic AI to Eliminate Operational Toil
  • Apply software engineering, infrastructure as code, and agentic AI-driven workflows to transform reactive troubleshooting into predictive, self-healing systems, reducing manual effort and operational risk.
  • Serve as Technical Interface & Trusted Advisor Across Teams
  • Act as the key technical liaison across IS&T, GNS partners, Hardware and Software Product Engineering, InfoSec, and external carriers, guiding product teams through critical launch cutovers and strategic partner onboarding.
  • Own End-to-End Reliability & Architectural Standards
  • Take complete ownership of the infrastructure lifecycle, from deep packet-level troubleshooting to permanent architectural fixes, while authoring design standards, site templates, and runbooks that enable repeatable, global operations.

Qualifications

  • 8+ years of enterprise experience designing, deploying, and operating global network security, routing, Switching, remote access VPN, and WAN/SD-WAN architectures.
  • Deep firewall & edge platform expertise: hands-on mastery of Cisco ASA / Firepower, Palo Alto Networks Firewalls, and Fortinet (FortiGate / FortiOS), including security policy architecture, NAT, NAT64 and platform lifecycle management.
  • Large-scale Remote Access & Zero Trust: proven track record engineering multi-profile SSL and IPsec remote access services (split/full tunnel, device posture, per-app VPN) and integrating with modern ZTNA/SSE architectures.
  • Advanced IPsec & Site-to-Site Connectivity: deep expertise in IKEv1/IKEv2, PKI/certificate authentication, crypto suites, VTI, DMVPN/FlexVPN, and resilient tunnel architecture for Client to site VPN, partners, 3PLs, and remote sites.
  • Complex Routing & WAN Edge: advanced BGP and OSPF routing design across hybrid WAN/SD-WAN environments, including carrier peering, traffic engineering, VRF route-leaking, and L2/L3 segmentation.
  • Identity & Access Management Integration: strong experience integrating network access with enterprise IAM systems—RADIUS, TACACS+, SAML/SSO, MFA, PKI certificate lifecycle, 802.1X, and NAC.
  • End-to-End Troubleshooting & Telemetry: exceptional packet-level diagnostic skills across security policies, overlay/underlay networks, and application layers.
  • Infrastructure Automation & Modern Tooling: proficiency automating network security provisioning and validation using Python, REST APIs, Ansible, or Terraform, with bonus AI/LLM-assisted workflows.

Skills

Required:Zero Trust networkingVPN technologies (SSL, IPsec)Hybrid SD-WANFirewall & edge platformsIKEv1/IKEv2, PKIBGP/OSPF, WAN routingIAM integration (RADIUS, SAML, MFA, 802.1X)Automation / IaC (Python, Ansible, Terraform)
Last updated Oct 2, 2026. Interested? Apply on the company site.

About Apple

Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.

Discover the innovative world of Apple and shop everything iPhone, iPad, Apple Watch, Mac, and Apple TV, plus explore accessories, entertainment, and expert device support.

AirPods Max 2Apple ArcadeApple CardApple Fitness+Apple MusicApple TVApple TV+Apple Watch Series 11
Company profileWebsite

More open roles at Apple