PKI Engineer - Crypto Services

Crypto Services’ PKI Engineers partner with engineers across the company who build secure, end-to-end solutions to provide digital certificate solutions

• Lead, from an engineering standpoint, all aspects of PKI integration projects including scope, requirements, and timelines
• Serve as a PKI subject matter expert for the rest of Apple and consult with teams on their PKI needs
• Design and create PKI configurations for X.509 certificate generation and revocation
• Perform data analysis to drive CA lifecycle management
• Ensure Apple PKI continues to use modern algorithms and keys and plans ahead for a post quantum future
• Support the PKI Compliance team by maintaining and developing software for automating compliance
• Support the PKI Policy team by providing input to Certificate Policies and Certificate Practice Statements

• 5+ years of large-scale enterprise PKI industry experience
• Experience in creating and maintaining Certificate Policies and Certification Practice Statements
• Experience integrating digital certificates with applications and services
• Experience as a PKI subject matter expert for large organizations on their PKI needs
• Working knowledge of PKI industry best practices and relevant standards and requirements
• 2+ years of expertise with scripting languages such as Bash or Python
• Ability to use OpenSSL or similar to view certificates, CRLs, and OCSP responses
• Strong interpersonal and leadership skills, including team-building, conflict resolution, and management
• Ability to communicate clearly and effectively to partner, influence, and instill confidence with key partners
• 3+ years of public PKI industry experience (WebTrust and/or ETSI)
• 2+ years Product Management experience
• Working knowledge of root program and CA/B Forum Requirements
• Experience operating within a WebTrust-compliant control environment
• Experience with Splunk, GitHub, and the Atlassian tool suite
• Able to create proof of concept PKIs using OpenSSL or similar
• Working knowledge of PQC algorithms and transition timelines

• Comprehensive medical and dental coverage
• Retirement benefits
• Range of discounted products and free services
• Reimbursement for certain educational expenses
• Discretionary restricted stock unit awards
• Employee Stock Purchase Plan
• Discretionary bonuses or commission payments
• Relocation assistance

Apple is where individual imaginations gather together, contributing to the values that lead to phenomenal work