Senior Backend Software Engineer (Security, Reliability)

Summary

The Apple Services Engineering (ASE) Commerce group is looking for an extraordinary back-end Java software engineer to join our Account Services software engineering team. The Commerce team provides the transactional engine for App Store, Apple Music, Apple TV+ and more. Our platform is the highest volume digital content store in the world, serving billions of transactions daily in more than 130 countries. We strive to provide a flawless purchase and subscription experience for our millions of customers and developers all over the world!

Description

As a Software Engineer on the Account Services team, you’ll build and evolve the secure, high-scale systems that power our platform’s most critical user flows. You’ll design and implement modern authentication protocols, strengthen our security posture through industry-leading best practices, and modernize legacy systems by adopting the newest technologies. This role sits at the intersection of Security Engineering, Fraud Prevention, Infrastructure, Product, Customer Support, and more. You’ll be responsible for developing secure account experiences, preventing fraud and abuse across the platform, and rapidly resolving customer-impacting issues. This position demands someone who can operate in ambiguity, make sound technical decisions under pressure, and translate complex security and reliability requirements into scalable, maintainable systems.

Minimum Qualifications

5+ years of software engineering experience implementing and maintaining critical systems at scale. Outstanding analytical problem-solving, debugging, and diagnostic skills. Willing to take ownership and set direction, and thrive navigating any ambiguity in your projects. BS degree, preferably in Computer Science or related experience. MS or equivalent preferred.

Preferred Qualifications

Experience with security protocols and controls such as OAuth2/OIDC, JWT, mTLS, PKCE, HSM/KMS key management, and secrets management (e.g., Vault). Strong understanding of authentication and authorization mechanisms, secure session management, token lifecycles, and abuse-defense patterns. SRE/infra experience with load balancing, autoscaling, traffic shaping, distributed systems debugging, and incident response. Proficiency with observability tooling - metrics, logs, and performance troubleshooting. Database expertise in relational systems (e.g. Oracle), including schema design, indexing, query optimization, and replication strategies. Experience designing and implementing REST/RPC APIs and backend services at scale. Strong commitment to automated testing, including integration, load, and end-to-end testing.