Compute Runtime Systems Engineer Containers & Virtualization

DESCRIPTION

The Apple Services Engineering (ASE) team builds the container and virtualization runtime technology that powers Apple's next-generation compute platform. We're a fast-moving, highly skilled team of systems engineers designing and developing the virtualization-based runtimes that run Virtual Machines and Linux Containers across our data center and Apple platforms — with privacy, security, and performance as first-class requirements. Beyond the datacenter, we maintain Apple Container, our open source project bringing native container support to macOS desktops.

We're filling multiple roles on this team, both junior and senior. We're looking to add talented, passionate people who love hard systems problems and want to build foundational technology used across Apple and the open source community — whether that's engineers early in their systems programming career looking to grow fast on a high-paced, experienced team, or seasoned domain experts ready to take ownership of significant technologies.

DESCRIPTION

We build the container runtime technology that Apple's own services and developers depend on. Our systems engineers develop virtualization-based runtimes — using macOS virtualization and VMM solutions like Cloud Hypervisor and sandboxed container solutions — to run Virtual Machines and Linux Containers across our data center and Apple platforms, with a relentless focus on privacy, security, and performance. This is a foundational systems team, not a web-services or operations team: we work at the level of kernel and container security, image distribution, file systems, and virtualization.

Much of this work is greenfield, solving problems unique to running on Apple's own hardware in the data center, at a scale and with constraints the rest of the industry hasn't had to solve for. Beyond the datacenter, we maintain Apple Container, our open source desktop tooling that lets developers around the world run containers natively on macOS. We're looking for a strong foundation in systems programming and a genuine curiosity about how containers and virtualization work under the hood, paired with the drive to learn quickly on a high-paced, experienced team.

We love open source and collaboration at every level.

Bachelor's Degree in Computer Science, or equivalent related experience. At least 3+ years of Software design and development experience in infrastructure engineering (compute, storage and network virtualization), containerization, or systems programming, with strong fundamentals Programming proficiency in C, C++, Swift or Go Familiarity with some or all of the following topics:
Linux containerization, Linux file systems, Image distribution, Content storage, Kernel and container security Ability to contribute to design docs and technical discussions, and to write clear, well-tested code Love open source and collaboration

Experience with Linux system programming Experience participating in code review, giving and receiving feedback on correctness and test coverage Exposure to writing tests for regression prevention or negative-case validation Development experience in one or more of:
Cloud security, Container / Linux Kernel security and API security Experience troubleshooting and diving into metrics to identify resource contention and bottlenecks Experience designing benchmarks and load tests to characterize performance and establish scalability models Development experience with container orchestration systems such as Docker, Kubernetes or Mesos is a plus Development experience with virtualization and container technologies such as Apple Container, Kata, Firecracker, or Kube Virt is a plus Systems programming experience on Darwin with Swift is a plus Programming system virtualization based on Cloud Hypervisor, rust-vmm, macOS Virtualization Framework, QEMU, or KVM is a plus