Senior iOS Developer

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Evaluate the existing cloud and infrastructure security posture within AWS environments, Kubernetes platforms, and associated services.

• Recognize key vulnerabilities and establish a prioritized plan for enhancing security maturity across identity, runtime, network, and platform layers.

• Develop and execute enterprise security controls pertaining to IAM governance, workload/runtime posture, and DNS security.

• Integrate security guardrails, standards, and policies into the frameworks of the Platform Engineering and Cloud Center of Excellence (CoE) from the outset of the transformation.

• Collaborate with platform teams to create secure-by-default self-service infrastructure patterns, templates, and workflows.

• Establish identity and access governance frameworks, including account strategies, role design, least-privilege policies, and federated access.

• Design and implement security standards for Kubernetes and containerized workloads, emphasizing supply chain security, workload isolation, and runtime protection.

• Outline DNS and network security practices, focusing on private networking, segmentation, service discovery, and threat protection.

• Work alongside DevSecOps teams to embed automated security testing, policy enforcement, and compliance verification into CI/CD pipelines.

• Assist in the development of security observability, monitoring, incident response, and threat detection capabilities throughout the platform.

• Provide security leadership and guidance to engineering teams to foster security ownership and best practices.

• Aid in organizational change management and stakeholder alignment to ensure security adoption across various teams.

• Continuously refine the security framework as the platform and operational model evolve.

⛳️ Requirements

• Over 7 years of experience in cybersecurity, cloud security, or platform security roles.

• In-depth knowledge of AWS security, including IAM, Organizations, SCPs, GuardDuty, Security Hub, CloudTrail, KMS, and networking security.

• Extensive experience securing Kubernetes environments, especially Amazon EKS, with a focus on workload identity, network policies, secrets management, and runtime security.

• Experience in designing and implementing enterprise IAM governance and access control models.

• Practical experience with DevSecOps methodologies and integrating security into CI/CD pipelines.

• Strong comprehension of cloud networking, DNS security, and zero-trust architectures.

• Experience in building security guardrails and policy-as-code using tools like Terraform, OPA, or comparable technologies.

• Proficient in conducting security posture assessments, threat modeling, and risk prioritization.

• Strong strategic thinking abilities with the capability to balance security, developer experience, and delivery speed.

• Excellent communication and stakeholder management skills across both technical and executive audiences.

• Experience working in distributed, international teams within complex and rapidly changing environments.

🏝️ Benefits

• Premium Healthcare

• Meal voucher

• Maternity and Parental leaves

• Mobile services subsidy

• Sick pay-Life insurance

• CI&T University

• Colombian Holidays

• Paid Vacations