Imagine what you can do here. Apple is a place where extraordinary people gather to do their lives best work. Together we create products and experiences people once couldn’t have imagined, and now, can’t imagine living without. It’s the diversity of those people and their ideas that inspires the innovation that runs through everything we do.

Description

APPLE INC has the following available in Cary, North Carolina. Design and develop web services for the reading, writing, and presentment of mobile digital identity documents and VICALs using the ISO 18013-5 and ISO 23220 specifications. Build solutions for the secure online reading of machine-readable passport books using the ICAO 9303 and GlobalPlatform Secure Element specifications. Use Hybrid Public Key Encryption (HPKE), CBOR Object Signing and Encryption (COSE), and JSON Web Signature (JWS) to ensure the security and integrity of data in transit. Create secure, distributed, fault-tolerant services for proofing, provisioning and management of digital identity documents using workflow orchestration systems like Temporal and AWS Step Functions. Use public key infrastructure (PKI) and hardware security modules (HSMs) to securely sign and encrypt data as part of Apple Wallet’s identity features. Participate in on-call rotations and deploy, run and monitor services on AWS.

40 hours/week.

Preferred Qualifications

N/A

Minimum Qualifications

Bachelor’s Degree or foreign equivalent in Computer Science or related field and 4 years of experience in the job offered or related occupation.

Experience and education must include:

Implementing the ICAO 9303 specification for interacting with machine-readable passport books.

Implementing the reading and writing of mobile digital identity documents and VICALs using the ISO 18013-5 and ISO 23220 specifications

Using Hybrid Public Key Encryption (HPKE), CBOR Object Signing and Encryption (COSE), and JSON Web Signature (JWS) to ensure the security and integrity of data in transit.

Implementing backend services for signing and encrypting data using public key infrastructure (PKI) and hardware security modules (HSMs)

Building server-driven device interaction flows using Near Field Communication (NFC) and the GlobalPlatform Secure Element specification.

Using Temporal (or similar workflow orchestration system, like AWS Step Functions) to create fault-tolerant, distributed state machines.

Writing scalable web services in JVM-based languages like Java and Kotlin to support products and meet business needs.

Designing schemas for and implementing distributed databases, like CockroachDB or DynamoDB to store data with high fault-tolerance.

Deploying, running, and monitoring services in AWS to ensure high reliability.