Staff Cloud Security Engineer

Remotedxb; Dubai; On-site; AED 350,000 - 650,000; Full time

Job summary

iFood, a Brazil-based technology leader in food delivery and fintech, seeks an expert Cloud Security Architect to design and evolve AWS-first security across a large-scale ecosystem. You will partner with Cloud Platform, SRE, Engineering, and Privacy teams to define reference architectures and automated controls.

You'll lead architecture reviews, model threats for critical cloud-native products, and drive automation via Terraform and policy-as-code.

Qualifications

• Expertise in designing and operating AWS-centric security architectures.
• Deep understanding of IAM, least privilege, and federated access.
• Strong experience securing Kubernetes workloads (EKS, containers) and cloud networks.
• Proficient in threat modeling, CNAPP/CSPM, Terraform, CI/CD pipelines, Python, Go, and Bash.
• Ability to lead technical discussions and influence security decisions without formal authority.

Responsibilities

• Lead design and evolution of AWS-first security architectures in a large-scale ecosystem.
• Serve as the primary technical reference for Cloud Security with cross-functional partners.
• Define and maintain reference architectures, paved roads, and automated controls for AWS.
• Lead architecture reviews and threat modeling for cloud-native products, APIs, data pipelines, and Kubernetes workloads.
• Oversee evolution of identity, access, Kubernetes, containers, and network standards.
• Strengthen cloud detection/response with telemetry standards and automated containment flows.
• Build security automations via infrastructure as code, policy as code, and Terraform modules.
• Mentor engineers and Security Champions.

Skills

AWS security

IAM least privilege

Kubernetes security

Cloud network security

Threat modeling

Terraform

CI/CD

Python

Go

Bash

Leadership

Tools

EKS

ECR

Helm

RBAC

OPA/Gatekeeper

Job description

About the Company

Transform your career with iFood! We are a Brazilian technology company and a reference in Latin America. Through innovative solutions, we connect thousands of restaurants to millions of consumers daily with an average of 100 million monthly orders. Beyond food delivery, we also operate in Market, Pharmacy, and Pet sectors. We also have iFood Pago, our Fintech, which includes iFood Benefits and iFood Pago, the restaurant's bank.

Responsibilities

• Lead the design and evolution of AWS-first security architectures in a large-scale technological ecosystem.
• Act as the main technical reference in Cloud Security, partnering with Cloud Platform, SRE, Engineering, Product, Privacy, Compliance, and Architecture teams.
• Define and maintain reference architectures, paved roads, reusable patterns, and automated controls for AWS environments.
• Lead architecture reviews and threat modeling for critical cloud-native products, APIs, data pipelines, and Kubernetes workloads.
• Responsible for the evolution of identity, access, Kubernetes, containers, and network standards.
• Strengthen cloud detection and response by defining telemetry standards, detection use cases, and automated containment flows.
• Build and scale security automations through infrastructure as code, policy as code, and secure Terraform modules.
• Mentor engineers, security specialists, and Security Champions.

Requirements

• Expert knowledge in AWS security architecture (IAM, Organizations, SCPs, GuardDuty, Security Hub, KMS, etc.).
• Deep experience with IAM, including least privilege, federated access, and workload identity.
• Advanced experience in Kubernetes and container security (EKS, ECR, Helm, RBAC, OPA/Gatekeeper).
• Advanced knowledge of cloud network security (VPC, routing, segmentation, WAF, DDoS protection).
• Solid experience with threat modeling, CNAPP/CSPM, Terraform, CI/CD, Python, Go, and Bash.
• Ability to lead technical discussions and influence without formal authority.

Preferred Qualifications

• Experience designing cross-functional security strategies and posture automation.
• Experience with multi-cloud environments (AWS and GCP).
• Experience with AI/ML security integrations and abuse scenario evaluation.
• Knowledge of ransomware, disaster recovery, and immutable backups.
• Experience with Zero Trust and shift-left security models.