# Ali Yousefi > Cloud Security Lead at Pinterest | AI Architect | Ex-Databricks Location: San Francisco Bay Area, United States Profile: https://flows.cv/aliyousefi Software Engineering Lead with a track record of building and scaling secure, resilient, high-performance systems that span the globe across various industries including AI, data platforms, analytics, digital ads, and financial services. My expertise spans back-end engineering, cybersecurity, big data, AI/ML, and cloud infrastructure (AWS, Azure, GCP). I’ve also helped organizations strengthen their cloud governance by defining clear standards, automating guardrails, and enabling teams to innovate safely yet swiftly within a well-architected, compliant cloud ecosystem, ensuring they build cost-effective, efficient systems aligned with industry best practices. I thrive at the intersection of deep technical challenges and organizational impact, leading cross-functional initiatives, mentoring high-performing engineers, and driving solutions that balance innovation and development velocity with security and reliability. Beyond implementation, I’ve been published on enterprise cloud security, recognized for building scalable data platforms, and have received multiple company-wide awards for engineering excellence, security leadership, and reliability. I’m passionate about solving complex problems, driving strategic technical impact, and enabling teams to do their best work. Always open to meaningful conversations—let’s connect. ## Work Experience ### Cloud Security Lead & Software Engineer @ Pinterest Jan 2024 – Present ### Senior Software Engineer @ Databricks Jan 2022 – Jan 2023 • Led the automation of AWS account provisioning via AWS Organizations, CI/CD, Python, and Terraform. Accounts deployed with core services, baseline security configurations, and ownership information. Presented project at 2023 Company Kick-Off in Las Vegas • Led design, development, and deployment of a FedRAMP-compliant software supply chain security application on Amazon EKS. Built custom Terraform modules for cloud infrastructure management. Tools used: Terraform, Helm, Kubernetes, Docker, Python, AWS • Led the Okta-integrated IAM standardization in Azure and Microsoft Entra ID (Azure AD), using Apache Spark to analyze audit logs at scale and define standard roles in a multi-tenant environment • Deployed a custom Slack chatbot with interactive Slack Block support to aid DART implement various detection and incident response workflows. Implemented novel framework for performing unit and input validation testing at scale against the bot using Python and Tines • Participated in Agile software development practices, requiring rigorous planning at the quarterly and sprint levels. Conducted reviews in GitHub to enhance code quality, performance, and adhere to software engineering best practices • Led the development of a multi-lambda, Python-based OIDC Okta app for accessing sensitive user data by enterprise identities in AWS and AWS GovCloud. Implemented custom, robust authentication mechanism, and enforced network security controls to enhance system security • Collaborated in automating Azure hierarchy management (management groups, subscriptions) and core resources/security configurations in a multi-tenant setup via Terraform, CI/CD, and Python • Contributed to the creation, configuration, and clearing of AWS sandbox accounts dedicated to running proof-of-concept cloud workloads by the organization • Implemented Azure Policy to monitor and restrict risky open ports at scale across a multi-tenant setup, with a flexible exception process ### Software Engineer @ Marqeta Jan 2021 – Jan 2022 | Oakland, California, United States • Collaborated on a business-critical, customer-facing microservice handling sensitive PCI-DSS data. Deployed service to Amazon EKS. Wrote and reviewed unit, integration, load, and abuse case tests, leading to both the discovery and fixing of concurrency and non-concurrency related bugs. Gathered metrics for service performance/resource consumption analysis • Built automation pipelines with Python to ingest data from multiple 3rd-party APIs and SaaS apps, enrich, aggregate, and load data into tracking system for consumption by other engineering teams. Built dashboards to visualize processed data in an easily understandable, consumable way for leadership • Developed and maintained high-performance, scalable back-end REST APIs using Java, Spring Boot, Hibernate, Kubernetes, Docker, and AWS. Implemented integration with front-end developed with Redux and React.js, and styled front-end with React Bootstrap framework. Collaborated with front-end engineers to define and document clear API specifications, and ensure effective communication between front-end and back-end teams • Reviewed architectures of multiple large-scale cloud-native applications in AWS. Actively participated in code reviews in GitHub Enterprise, providing constructive feedback and suggestions to maintain code quality and adhere to best practices • Implemented a custom automated code ownership discovery system in Go for all company GitHub repositories, allowing security teams to collaborate with owners on various types of vulnerabilities immediately • Implemented comprehensive testing strategies including unit, integration, load, and security testing, within multiple CI pipelines across GitHub Enterprise. Improved the reliability, stability, performance, and security of back-end services • Built automation pipelines, data visualizations, and security tooling that permitted tracking of vulnerabilities, security configurations, and code ownership across Github Enterprise for compliance requirements ### Research Associate @ University of California, Santa Cruz Jan 2017 – Jan 2018 • Researcher at the Partch Lab in UCSC, a lead biochemistry lab focusing on circadian rhythms in mammals and cyanobacteria • Performed a library screening of 500 fragment molecules against PPIE via a fragment-based drug discovery (FBDD) approach by Nuclear Magnetic Resonance (NMR). Analyzed acquired NMR data using NMRViewJ software and pandas package in Python • Molecular cloning, protein expression, and protein purification of numerous proteins via Ni-NTA column chromatography and AKTA Fast Protein Liquid Chromatography (FPLC) • Enzyme kinetics: performed fluorescence polarization to assay and evaluate kinetics of protein-ligand interactions between various PPIases for fluorescently-labeled peptide substrate. Evaluated results of assay using Microsoft Excel and Prism software • X-ray crystallography: successfully performed hanging-drop vapor diffusion technique to acquire PPIA crystals for soaking of cyclic peptides designed by the David Baker Lab and of chemical fragments. Looped crystals for acquirement of X-ray diffraction data • First author and presenter: Ali Yousefi, et al., Modulation of the circadian period: searching for isoform-selective cyclophilin inhibitors, Poster in Biophysical Society Conference, 2018, San Francisco • Mentored a Ph.D student in the Partch lab on FBDD by NMR library screening ### Modified Supplemental Instruction Leader @ University of California, Santa Cruz Jan 2015 – Jan 2016 | Learning Support Services • Taught Statistics and Organic Chemistry classes to undergraduates with up to 40 students at a time • Led one-on-one tutoring sessions with DRC (Disability Resource Center) students on a regular basis • Customized teaching skills according to needs and concerns of individual students • Utilized my communication skills and gained substantial understanding of effective teaching and presentation methods while creating an open and engaging environment for students to work on their strengths and weaknesses ## Education ### Bachelor's degree in Biochemistry and Molecular Biology University of California, Santa Cruz ## Contact & Social - LinkedIn: https://linkedin.com/in/ali-yousefi-303955138 --- Source: https://flows.cv/aliyousefi JSON Resume: https://flows.cv/aliyousefi/resume.json Last updated: 2026-03-22