VM Provisioning & Automation (Existing Estate)

• Maintain and operate existing virtual machines, primarily on RHEL, while migration to the new environment is in progress
• Build and maintain standardised, repeatable provisioning processes (e.g. via Ansible, Terraform, or equivalent IaC tooling)
• Manage package deployment, software repositories, databases, and web servers
• Own the patching and update lifecycle for managed systems

Monitoring & Reliability

• Implement and maintain monitoring, alerting, and observability across both the existing VM estate and the new container environment
• Proactively identify risks, bottlenecks, and failure patterns before they impact users
• Define and track appropriate SLIs/SLOs for critical services
• Conduct post-incident reviews and drive lasting improvements

Supporting AI-Augmented Development

• A large proportion of the solutions you will support are built rapidly using structured AI-assisted development — you must be comfortable working with codebases and configurations that evolve quickly, may not have deep documentation histories, and may have been substantially generated with AI tooling
• Provide the infrastructure scaffold that allows AI-assisted solutions to move from local development to production reliably and safely
• Be a pragmatic partner to developers: unblock deployment quickly, catch infrastructure-level risks early, and help establish patterns that make rapid iteration safe at scale
• Actively use AI tools (e.g. Claude, Copilot, or similar) to accelerate your own work: writing scripts, diagnosing issues, generating runbooks, reviewing configurations

Diagnosis & Incident Response

• Take ownership of vague or ambiguous production issues (e.g. “it’s running slow”, “the server keeps falling over”) and drive them through to resolution
• Deliver short-term fixes rapidly to restore service, while tracking and delivering long-term root cause resolutions
• Maintain a pragmatic balance between speed-of-recovery and quality-of-fix

SKILLS & EXPERIENCE

Essential

• Proven experience in a DevOps, infrastructure, or platform engineering role
• Hands-on experience with Kubernetes — deploying, configuring, and operating workloads in a shared or managed cluster environment
• Experience containerising applications: writing Dockerfiles, managing images, publishing to a registry, and debugging container-level issues
• Strong networking fundamentals: DNS, TLS/SSL certificates, firewall rules, load balancing, VPNs, and service-to-service connectivity
• Comfort operating in environments where the architecture is still being defined — able to contribute to the decision, then execute once direction is set
• Hands-on experience with RHEL (or equivalent enterprise Linux) — provisioning, hardening, package management (yum/dnf), systemd services
• Experience managing cloud infrastructure, ideally in an enterprise private/hybrid cloud environment
• Experience with infrastructure-as-code or configuration management tooling (e.g. Terraform, Ansible, Puppet, or similar)
• Solid scripting ability in Bash and at least one higher-level language (Python preferred)
• Experience with monitoring and observability tooling (e.g. Prometheus, Grafana, Datadog, or similar)
• Strong incident diagnosis skills — able to work from vague symptoms to root cause using logs, metrics, and reasoning
• Comfortable working with AI-generated or AI-assisted codebases: reading, extending, and debugging solutions without a full traditional authorship history
• Clear written and verbal communication — able to translate infrastructure complexity for non-technical stakeholders

Desirable

• Experience with AWS or AWS@Apple, particularly EKS
• Familiarity with Apple’s internal platform tooling: Kube, Shield, Appleconnect, Floodgate, or similar
• Experience integrating with Snowflake, including managing drivers, credentials, and network access
• Experience with CI/CD pipelines (GitLab CI, Jenkins, GitHub Actions, or similar)
• Exposure to security tooling, vulnerability scanning, or compliance frameworks (e.g. CIS Benchmarks)
• Familiarity with secrets management tooling (Vault, CyberArk, or similar)
• Experience working in a regulated or enterprise environment with change management processes

WAYS OF WORKING

• You are comfortable with genuine ambiguity — including at the architectural level — and can make progress and contribute to decisions without waiting for everything to be resolved
• You default to automation: if you do something twice, you script it; if you do it three times, you build a process
• You adapt quickly: the tools, environments, and solutions you support can change fast, and you treat that as normal rather than exceptional
• You are pragmatic under pressure: you know when to stop the bleeding first and fix it properly later
• You are self-directed and comfortable owning problems end-to-end with minimal hand-holding
• You are a willing partner to developers who move fast — you keep up, add guardrails where they matter, and don’t become a bottleneck

WHAT SUCCESS LOOKS LIKE

• A new managed container environment is designed, built, and running — with existing VM-based workloads migrated onto it in a controlled, sequenced way
• The standard deployment path (build → containerise → publish → connect) is well-established, documented, and easy for the team to use
• Connectivity from the new environment to Apple internal systems (Snowflake, Appleconnect, Shield, Floodgate, etc.) is reliable, well-understood, and correctly secured
• Teams are unblocked quickly when they need new integrations, access, or capabilities — even when the solutions they are deploying have been built at speed
• Production issues are resolved rapidly, with lasting fixes following close behind
• Monitoring catches issues before users do
• The infrastructure estate — both old and new — is well-documented, well-understood, and in a known-good state