Job Description

Locations

• San Francisco Bay Area, California, United States

Salary

Skills Required

• solving complex challengesintermediate
• mentoring othersintermediate
• platform roadmap alignmentintermediate
• executing live eventsintermediate
• exceeding SLAsintermediate
• multi-region DRintermediate
• tested failoverintermediate
• run-booksintermediate
• reduced MTTRintermediate
• design rigorintermediate
• documentationintermediate
• velocity improvementintermediate
• ingest workflowsintermediate
• encoder/transcoder orchestrationintermediate
• ABR laddersintermediate
• packaging/manifest generationintermediate
• entitlements by org/roleintermediate
• content classificationintermediate
• watermarkingintermediate
• retention policiesintermediate
• scaling strategiesintermediate
• global broadcastsintermediate
• mixed networks handlingintermediate

Required Qualifications

• Technical degree or equivalent experience building large-scale distributed backends. (experience)
• 10+ years building large-scale distributed backend systems. (experience, 10 years)
• 8+ years of Java & API development. (experience, 8 years)
• 5+ years of end-to-end live/VOD pipelines: ingest, transcode orchestration, ABR ladders, HLS/DASH packaging/manifests. (experience, 5 years)
• 5+ years of enterprise video protection: DRM, entitlement/authorization. (experience, 5 years)

Preferred Qualifications

• Deep experience with fault-tolerant distributed systems, multi-region architectures, idempotency, backpressure, and resiliency patterns (circuit breaking, bulkheads). Containers, orchestration, and IaC: Docker, Kubernetes, CI/CD, Terraform (or equivalent). (experience)
• Cloud proficiency (AWS): compute, networking, IAM, object storage; strong cost-awareness and capacity planning. (experience)
• AWS media services, such as AWS Live & AWS Media Package. (experience)
• Datastores and messaging: SQL and NoSQL (e.g., Oracle, DynamoDB, MongoDB), caching (Redis), and streams (Kafka/Pub/Sub). (experience)
• Enterprise identity and security: OAuth2/OIDC/SAML, RBAC/ABAC, token-based auth, encryption in transit/at rest, auditing. Strong observability and operational excellence: metrics/logs/traces (OpenTelemetry), SLI/SLO/error budgets, on-call and incident management. (experience)
• Codecs/containers (H.264/AVC, H.265/HEVC, AV1; MP4/fMP4) and live ingest protocols (SRT, RIST, RTMP). (experience)
• CDN and edge: internal cache hierarchy, multi-CDN switching, token auth, and cache-control for enterprise networks. (experience)
• Accessibility and compliance: captions, translations, WCAG; knowledge governance, eDiscovery/legal hold. (experience)
• Data/analytics for QoE and engagement; familiarity with Hadoop/Ozone is a plus. (experience)
• Automation to reduce operational toil; practical use of GenAI to boost developer productivity within security constraints. (experience)
• Zero Trust networking concepts, device posture/attestation, and MDM integration. (experience)

Responsibilities

• Drive a platform roadmap aligned with Apple Information Security (AIS) and product stakeholders.
• Execute company-wide live event (e.g., all-hands) meeting, exceeding SLAs.
• Clear reliability posture: multi-region DR, tested failover, run-books, and reduced MTTR.
• Demonstrable mentorship and cross-team impact: stronger design rigor, docs, and velocity.
• Internal Streaming/Media. Live and VOD workflows: ingest, encoder/transcoder orchestration, ABR ladders, packaging/manifest generation
• Secure internal distribution: entitlements by org/role, content classification, watermarking, and retention policies.
• Peak-event readiness: scaling strategies for all-hands and global broadcasts across mixed networks (office, home, VPN).
• Own the end-to-end backend architecture: ingest, live/VOD encoding orchestration, packaging/manifest services, DRM/entitlements, playback APIs, and multi-region failover.
• Integrate with enterprise identity and policy: SSO (OIDC/SAML), audit trails, and policy enforcement for compliance and least-privilege.
• Engineer for peak events: capacity modeling, autoscaling, load shedding, graceful degradation, and DR playbooks that sustain company-wide concurrency spikes. Optimize delivery for enterprise networks: internal CDNs/edge caches, multi-CDN strategies, VPN-aware routing, caching, and bandwidth efficiency.
• Build reusable platform abstractions and APIs that enable comms, HR/training, and product teams to publish, schedule, and measure content safely and reliably. Partner with Security, IT/Networking, Client/Player, Data/Analytics, Compliance/Legal, and Comms to align roadmap and ensure policy, privacy, and accessibility (captions/ASR) are first-class.
• Lead incident response for live events; drive postmortems and systemic reliability improvements.
• Make build-vs-buy decisions and vendor integrations where appropriate; negotiate SLAs and own total cost of ownership.
• Mentor engineers, lead design reviews/RFCs, and elevate engineering standards across teams.

Tags & Categories