FLORIANÓPOLIS · SC · BRAZIL

Infrastructure and DevOps focused on reliability, automation and operations.

More than five years working with servers, networks, cloud, observability, CI/CD, security and process automation in corporate environments.

View projects & work LinkedIn ↗

InfrastructureDevOpsSREAWSAutomationSecurity

CURRENT FOCUSSRE · DevOps · Cloud

AWS · Observability · CI/CD · Kubernetes · GitOps

FOCUS AREAS

From corporate infrastructure to automated delivery.

Hands-on experience combining operations, cloud, security, observability and automation to keep environments stable and easier to manage.

Infrastructure & Cloud

Linux, Windows Server, AWS, virtualization, networking, DNS, corporate services and hybrid environments.

DevOps & CI/CD

TeamCity, GitHub Actions, Terraform, Kubernetes, EKS, ECR, GitOps and ArgoCD.

Observability & SRE

Grafana, Prometheus, Loki, logs, metrics, alerts, troubleshooting and incident response.

Automation & AI

Chatbots, OpenAI API, Meta WhatsApp Cloud API, n8n, APIs, webhooks and knowledge bases.

Security & Networks

Cloudflare, pfSense, Palo Alto PA-410, VPN, TLS, access management, hardening, continuity and recovery.

Workplace & Identity

Google Workspace, Microsoft 365, Active Directory, users, groups, corporate email and access governance.

FEATURED PROJECTS

Four projects that show how I work.

Selected for technical impact, relevance to SRE/DevOps and their ability to demonstrate infrastructure, automation and reliability decisions.

OBSERVABILITY · PRODUCTION

Production monitoring and centralized logging

CONTEXT

Server and application metrics and logs were distributed, and part of the troubleshooting process depended on direct host access.

IMPLEMENTATION

Implemented dashboards, metrics, alerts and centralized logging with Grafana, Prometheus and Loki in Linux environments.

RESULT

The team gained stronger operational visibility and could investigate failures with less direct access to critical servers.

TECHNICAL SUMMARY · Grafana · Prometheus · Loki · Linux · Alerting

CI/CD · OPERATIONS

Corporate build and deployment pipelines

CONTEXT

Staging and production applications required consistent visibility into executions and deployment failures.

IMPLEMENTATION

Operated and validated TeamCity pipelines, tracking builds, deployments, executions and troubleshooting with infrastructure and development teams.

RESULT

Improved operational control over releases and faster identification of failures across staging and production.

TECHNICAL SUMMARY · TeamCity · CI/CD · Linux · Staging · Production

CI/CD · GITOPS · FIAP

ToggleMaster — infrastructure as code and GitOps delivery

CONTEXT

The challenge was to deliver five microservices with reproducible infrastructure, a pipeline with validation checks and automated Kubernetes deployment.

IMPLEMENTATION

Built the CI/CD stage, image publishing to Amazon ECR and GitOps delivery with ArgoCD on Amazon EKS, supported by Terraform and GitHub Actions.

RESULT

Versioned, reproducible infrastructure with all five microservices synchronized and healthy in the cluster.

TECHNICAL SUMMARY · 5 microservices · Terraform → ECR → ArgoCD → EKS

GitHub · view repository ↗

CONTINUITY · INCIDENT RESPONSE

Environment recovery, backup and operational continuity

CONTEXT

A security incident affected business continuity and required controlled recovery of critical services.

IMPLEMENTATION

Worked on technical containment and recovery, service rebuilding, access review, Veeam backup planning and recovery documentation.

RESULT

Critical services were restored with stronger controls and more structured continuity and recovery routines.

TECHNICAL SUMMARY · Veeam · VMware · Windows/Linux · Backup · Hardening

ADDITIONAL WORK

Additional projects that complement my work across automation, cloud, security and corporate platforms.

AI chatbot and knowledge base

Structured intake, triage, ticket creation and human handoff flows.

OpenAI API · WhatsApp Cloud API · APIs · Webhooks

Mautic + Amazon SES

Email automation server with domain configuration and delivery integration.

Linux · Mautic · SMTP · SES · DNS

Hybrid infrastructure and AWS

Supported servers, cloud resources and internal services across staging and production.

AWS · Linux · Windows Server · VMware · Hyper-V

Cloudflare and service protection

Published and protected web services using DNS, certificates, proxy and edge controls.

Cloudflare · DNS · SSL/TLS · WAF · Nginx

Workplace and identity

Managed users, groups, permissions, corporate email and access.

Google Workspace · Microsoft 365 · Active Directory

SECURITY & RESILIENCE

Security applied to infrastructure, automation and operations.

Server and service protection, access control, incident response and environment recovery. Security integrated into my infrastructure, cloud and automation work.

Incident response

Initial investigation of suspicious behavior, containment, access review and controlled service recovery.

Linux · Windows Server · Logs · Incident Response

Web and perimeter protection

Cloudflare, WAF rules, DNS, SSL/TLS and Nginx for publishing services with edge controls.

Cloudflare · WAF · Nginx · TLS

Linux hardening

SSH restrictions, UFW firewall, Fail2ban and administrative access through a VPN to reduce server exposure.

Linux · SSH · UFW · Fail2ban · Tailscale

Networks, identity and access

Administration of firewalls, VPNs, users, groups and permissions in corporate environments.

pfSense · Palo Alto PA-410 · Active Directory · LDAP

Secure Automation & Operations

Scripts and delivery processes with attention to credentials, environment variables, permissions, version control and change validation.

Shell · PowerShell · TeamCity · GitHub Actions · Terraform

Backup and recovery

Backup, replication, service recovery and procedure documentation to support operational continuity.

Veeam · Dell NetWorker · VMware · Hyper-V

SECURITY IN PRACTICE

Corporate experience and a personal lab, with context, implementation and results.

CORPORATE ENVIRONMENT · INCIDENT RESPONSE

Response to a critical incident

CONTEXT

A security incident affected corporate services and business continuity.

IMPLEMENTATION

Worked on technical containment and recovery, service rebuilding, access review and recovery documentation.

RESULT

Critical services restored with stronger controls and more structured recovery routines.

Windows/Linux · VMware · Veeam · Hardening

PERSONAL LAB · LINUX HARDENING

VPS administration through a VPN

CONTEXT

Maintain remote VPS administration without exposing the SSH port to the internet.

IMPLEMENTATION

Configured UFW, Fail2ban and Tailscale VPN, allowing SSH through the VPN interface and removing public access to port 22.

RESULT

SSH access verified through the VPN; connection attempts outside the VPN did not connect.

Linux · UFW · Fail2ban · Tailscale · SSH

WEB SECURITY · WAF

Web service protection

CONTEXT

Publish web services with security controls at the edge.

IMPLEMENTATION

Configured Cloudflare, proxy, DNS, SSL/TLS certificates, WAF rules and Nginx.

RESULT

Services published with HTTPS and an edge request filtering layer.

Cloudflare · WAF · DNS · TLS · Nginx

PROFESSIONAL EXPERIENCE

A career built in operations.

Roles that built my infrastructure foundation and expanded my work into cloud, automation, DevOps and SRE.

NOV 2025 — PRESENT

GeoEnergy Engenharia

IT Technical Consulting · Infrastructure & Cloud

Assessment and evolution of hybrid infrastructure, backup, monitoring, documentation, continuity and resource optimization.

FEB 2026 — SEP 2026

SmartPay Serviços Digitais

Infrastructure & DevOps Analyst

Administered AWS and on-premises environments, Linux and Windows Server, Active Directory, pfSense, VPN, DNS and Cloudflare; implemented observability with Grafana, Prometheus and Loki and operated TeamCity pipelines, improving operational visibility and delivery control.

FEB 2026 — SEP 2026

Truther by RezolvePay

Infrastructure · Automation · DevOps

Designed a support platform with chatbot, knowledge base, automated triage and human handoff, integrating OpenAI API, Meta WhatsApp Cloud API, APIs and webhooks to standardize tickets and reduce manual support steps.

MAY 2023 — OCT 2025

GeoEnergy Engenharia e Serviços

IT Infrastructure Analyst

Built and supported hybrid infrastructure, administered Palo Alto PA-410 firewall, virtualization, backup, environment recovery and operational continuity.

JAN 2021 — FEB 2022

Laudocom Engenharia

Information Technology

Corporate support, infrastructure, networking, workstations, assets and technical documentation.

TECHNOLOGIES & PRACTICES

Core stack, without the noise.

Cloud & Delivery

AWS · EC2 · EKS · ECR · Terraform · Kubernetes · ArgoCD · GitOps · TeamCity · GitHub Actions · CI/CD

Infrastructure & Security

Linux · Windows Server · VMware · Hyper-V · pfSense · Palo Alto PA-410 · Veeam · Dell NetWorker · Nginx · DNS · Cloudflare · WAF · TLS · SSH · UFW · Fail2ban · Tailscale

Observability & Reliability

Grafana · Prometheus · Loki · metrics · logs · alerting · troubleshooting · incident response

Automation & Platforms

OpenAI API · Meta WhatsApp Cloud API · n8n · APIs · Webhooks · Mautic · Google Workspace · Microsoft 365 · Active Directory

EDUCATION

Academic background with practical application.

2026 — 2027

Postgraduate Program in DevOps and Cloud Architecture

FIAP

2022 — 2025

B.Sc. in Information Systems

Universidade do Sul de Santa Catarina

2021 — 2022

Front-end Engineering

EBAC

CONTACT

Solid infrastructure. Automation that simplifies operations.

Open to opportunities in SRE, DevOps, Cloud and Infrastructure Engineering.

Send email LinkedIn ↗ Resume ↗