Arthur is available for hire
Hire ArthurArthur Duarte
Verified Expert in Engineering
Cloud Architect and Developer
Curitiba - State of Paraná, Brazil
Toptal member since February 1, 2023
Bio
Arthur is an AWS Certified Solutions Architect Professional with over 14 years of cloud experience, architecting scalable, secure infrastructure across AWS, GCP, and Oracle OCI. He specializes in Terraform, container orchestration, and FinOps, having reduced clients' cloud costs by up to 50%. From AI/LLM platforms to enterprise networking, Arthur turns complex challenges into reliable, cost-effective solutions.
Portfolio
Freelance Clients
Terraform, AWS Cloud Development Kit (CDK), Amazon Web Services (AWS)...
Freelance Clients
AWS IoT, Terraform, Docker, AWS Fargate...
Company DENAR For Investment Limited Liability
PostgreSQL, DevOps, Linux, Oracle Cloud Infrastructure (OCI), Oracle Cloud...
Experience
- Amazon Web Services (AWS) - 16 years
- AWS Cloud Architecture - 13 years
- Enterprise Architecture - 13 years
- Infrastructure as Code (IaC) - 8 years
- Terraform - 6 years
- AWS Lambda - 5 years
- CI/CD Pipelines - 4 years
- AWS CloudFormation - 2 years
Work Experience
Cloud Infrastructure & DevOps Engineer
2026 - PRESENT
Freelance Clients
- Designed and built a new AWS Landing Zone from scratch using AWS Organizations, Control Tower and SSO, replacing the company's legacy multi-account setup.
- Migrated the company's infrastructure-as-code from AWS CDK to Terraform, covering networking, compute, database, identity, security, messaging, scheduling and CDN.
- Built and maintained the cloud foundation connecting the company's product portfolio, spanning cloud infrastructure, integrations, identity services, APIs and data flows.
- Supported platform modernization and scaling efforts as part of the infrastructure roadmap, working within the team that owns the AWS infrastructure.
- Assessed the AWS infrastructure of a growing multi-tenant wine-industry SaaS platform, documenting reliability risks and improving availability and redundancy across production services.
- Wrote the database recovery runbook covering restore from backup and repointing the application to the restored cluster, as part of validated disaster recovery procedures.
- Integrated New Relic APM into the API server on Amazon ECS (Fargate), storing the license key in AWS Secrets Manager and instrumenting PostgreSQL/Sequelize.
- Investigated database connection pool exhaustion by enabling ECS Exec on the API server, setting an explicit Sequelize pool size and documenting connection pooling.
- Tuned Amazon Aurora PostgreSQL Serverless v2 capacity per environment, raising the production minimum to 2 ACUs while keeping staging at 0.5 ACU.
- Moved the production SQS-triggered Lambda deployment into AWS CDK and built EventBridge-scheduled Lambda functions deployed through AWS CodeBuild and GitHub.
Technologies: Terraform, AWS Cloud Development Kit (CDK), Amazon Web Services (AWS), AWS Control Tower, AWS Organizations, AWS Lambda, Amazon Virtual Private Cloud (VPC), API Gateways, Amazon DynamoDB, Amazon S3 (AWS S3), Amazon CloudFront, Amazon Cognito, AWS IAM, AWS Secrets Manager, AWS WAF, Amazon Simple Notification Service (SNS), Amazon Simple Queue Service (SQS), Amazon EventBridge, Amazon CloudWatch, GitHub Actions, Claude Code, Docker, Amazon Elastic Container Service (ECS), AWS Fargate, Amazon Aurora, PostgreSQL, Sequelize, TypeScript, Node.js, AWS CodeBuild, GitHub, New Relic, AWS Systems Manager, Infrastructure Monitoring, REST, Cost Reduction & Optimization (Cost-down), Backup & Recovery, Disaster Recovery Plans (DRP), APIs, Containers, Containerization, Security, Web Scalability, Scalability, Monitoring, Business Continuity & Disaster Recovery (BCDR), Microservices Architecture, Logging, Serverless, Serverless Architecture, Cloud FinOps, Troubleshooting, SaaS, AWS Cloud Security, Performance, APIs, Infrastructure Security, AWS ECS Fargate, Performance Tuning, Documentation, Performance Optimization, Observability, Citrix ZenServer, Dell PowerEdge Servers, Office 365
DevOps Engineer
2022 - PRESENT
Freelance Clients
- Worked as a freelance contractor for PwC and architected the complete cloud infrastructure of Code Intelligence, an AI platform that parses and documents large enterprise codebases.
- Serve as the cloud infrastructure specialist for the Code Intelligence rollout to 2K Games, processing Unreal Engine 5 C++ codebases with 178,000+ files.
- Designed a distributed parser with SQS FIFO chunking across auto-scaled ECS containers, processing 178,000+ files with 29 parallel containers in 138 seconds.
- Engineered the Atomic Gate pattern, a coordinatorless completion mechanism where the last finishing worker triggers the next pipeline phase, removing the central orchestrator.
- Built a 10-stage end-to-end pipeline and provisioned seven AI agents as independent ECS services with Celery workers, plus 30+ reusable Terraform modules.
- Designed the enterprise networking layer with Transit Gateway, Site-to-Site VPN to the corporate network, 12 VPC Endpoints, and five isolated subnet tiers.
- Served as an AWS Well-Architected Framework reviewer for Booz Allen Hamilton, producing high-level and low-level architecture documentation and implementation models.
- Implemented AWS Global Accelerator for Disaster Recovery at Booz Allen Hamilton, making region failover faster and simpler.
- Published SRE best practice guidelines, runbooks, and templates, and connected AWS to Slack with AWS Chatbot so engineers could query and command resources.
Technologies: AWS IoT, Terraform, Docker, AWS Fargate, Amazon Elastic Container Registry (ECR), Amazon EC2, Amazon Simple Queue Service (SQS), Amazon RDS, PostgreSQL, Neo4j, Amazon Bedrock AgentCore, LangChain, LangGraph, LangFuse, AWS CodePipeline, AWS CodeBuild, GitHub Actions, AWS Transit Gateway, Site-to-site VPN, Amazon CloudWatch, AWS Key Management Service (KMS), Python, Celery, AWS Cloud Development Kit (CDK), Load Testing, TypeScript, Artificial Intelligence (AI), Cloud Monitoring, Software Engineering, YAML, Automation Testing, Deployment, Multi-tenant Architecture, Row-level Security (RLS), Large Language Models (LLMs), AI Agent Orchestration, AI Agents, Agentic AI Systems, Agentic Deployment, AI Tools, AI/ML Workloads, AWS Cloud Operations, Python 3, AWS Cloud Architecture, Enterprise Architecture, Startups, Infrastructure Monitoring, REST, Cost Reduction & Optimization (Cost-down), Cloud Infrastructure, Shell Scripting, Site Reliability Engineering (SRE), Backup & Recovery, Disaster Recovery Plans (DRP), DevOps Engineer, Solution Architecture, APIs, Containers, Containerization, Security, Computer Networking, Orchestration, Cloud Engineering, Cloud Migration, Network Architecture, TCP/IP, Cybersecurity, Web Scalability, Scalability, Infrastructure, Load Balancers, Infrastructure as a Service (IaaS), IP Networks, OpenVPN, Cloud Gateway, Monitoring, Business Continuity & Disaster Recovery (BCDR), Microservices Architecture, Transport Layer Security (TLS), Database Security, Provisioning Tools, Logging, Linux Administration, Serverless, Serverless Architecture, Scripting Languages, CloudOps, Scripting, Network Security, Apache HTTP Server, Audits, AWS Cloud Computing Services, SecOps, Cloud FinOps, Troubleshooting, SaaS, AWS Cloud Security, IT Administration, NoSQL, Bash Script, Performance, Cloud, APIs, Infrastructure Security, Network Engineering, Cloud Networking, Scalable Architecture, AWS ECS Fargate, Backups, Performance Tuning, Version Control, Version Control Systems, GCP DevOps, Documentation, IT Infrastructure Management (ITIM), AWS Deployment, Virtual Machines, Private Clouds, Performance Optimization, Observability, Virtualization, Vulnerability Scanning, Office 365
Senior Cloud Architect
2024 - 2026
Company DENAR For Investment Limited Liability
- Owned the multi-cloud estate of a financial trading firm across Oracle Cloud (OCI) and Google Cloud, advising the IT Director and CEO.
- Led the build of new staging and production environments on Google Cloud, covering networking, security, Kubernetes, and the GCP Landing Zone.
- Migrated 20+ applications from Docker Compose servers to Kubernetes on OKE and GKE, and moved workloads between OCI and GCP with no service loss.
- Architected a secondary OCI region in Riyadh for Disaster Recovery, with KMS Vault, OCI Bastion, VCN flow logs, NSG micro-segmentation, and cross-region DRG peering.
- Migrated 28+ production pipelines from Microsoft-hosted to self-hosted Azure DevOps agent pools on OKE/GKE, using Workload Identity Federation and outbound-only polling.
- Codified the multi-cloud estate as modular Terraform, importing existing VPCs, GKE/OKE clusters, Cloud SQL, VPNs, DNS zones, firewalls, and Cloud Armor.
- Led a DevSecOps hardening program: Pod Security Admission, seccomp, kubescape, ModSecurity WAF, database auditing, and removal of public-IP jump servers.
- Implemented FinOps automation with Terraform scheduler modules that stop and start non-production compute and Cloud SQL outside office hours.
- Led the implementation of redundant OCI FastConnect circuits via multiple carriers for dedicated low-latency connectivity with the Tadawul stock exchange.
- Deployed a self-hosted observability stack (Grafana, Tempo, Loki, and Prometheus) alongside New Relic, and passed the Tadawul infrastructure audit and certification.
Technologies: PostgreSQL, DevOps, Linux, Oracle Cloud Infrastructure (OCI), Oracle Cloud, Google Cloud Platform (GCP), Azure, Terraform, Kubernetes, OKE, Google Kubernetes Engine (GKE), Docker, Azure DevOps, GitHub Actions, Site-to-site VPN, FastConnect, Cloud Armor, F5 NGINX Ingress, OCI Bastion, OCI Vault, GCP Secret Manager, Grafana, Prometheus, Loki, New Relic, SQL, RabbitMQ, Fortinet, Docker Compose, FortiGate, Load Testing, Microsoft Teams, Oracle Linux, RHEL, STC Circuit, SigNoz, Cloud Monitoring, YAML, Deployment, Row-level Security (RLS), Infrastructure as Code (IaC), VPN, Amazon Virtual Private Cloud (VPC), FinOps, NGINX, CI/CD Pipelines, Python, Windows Server, DNS, GitHub, Firewalls, Continuous Integration (CI), Redis, Continuous Delivery (CD), Microsoft 365, DevSecOps, SSL, Node.js, .NET, OneDrive, Outlook, Sentry, Web Application Firewall (WAF), Ubuntu, Google Cloud, AWS Key Management Service (KMS), Virtual Private Cloud (VPC), Artificial Intelligence (AI), AI Tools, AI/ML Workloads, Fortinet Firewall Configuration, Office 365
AWS DevOps Architect
2025 - 2025
Freelance Clients
- Worked at Coretext AI and architected and implemented enterprise-grade AWS cloud infrastructure entirely as code with Terraform.
- Led the design and implementation of the company's core Event-Driven Architecture, the backbone of the AI platform, enabling real-time data processing between microservices.
- Designed and deployed a complete multi-service AI platform infrastructure on AWS, with containerized microservices across multiple environments.
- Established a monitoring and alerting ecosystem with Amazon CloudWatch, Amazon SNS and Slack integrations, giving real-time visibility across every environment.
- Implemented security best practices and compliance controls for the AI/ML platform, and provided FinOps cost optimization guidance.
Technologies: AWS IoT, Terraform, Docker, AWS Fargate, AWS Lambda, Amazon API Gateway, Amazon Simple Queue Service (SQS), Amazon RDS, PostgreSQL, Amazon VPC, AWS NAT Gateway, Amazon Route 53, Amazon CloudWatch, AWS Key Management Service (KMS), AWS Secrets Manager, AWS Certificate Manager, GitHub, GitHub Actions, Shell Script, Microservices, Event-driven Architecture, Load Testing, Cloud Monitoring, YAML, Deployment, Large Language Models (LLMs), AI Agent Orchestration, AI Agents, Agentic AI Systems, Agentic Deployment, AI Tools, AI/ML Workloads, Amazon Web Services (AWS), Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), FinOps, ECS, Amazon Elastic Container Service (ECS), GitOps, Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Artificial Intelligence (AI), AWS Cloud Operations, Office 365
Security Lead
2025 - 2025
Miaplaza, Inc.
- Delivered security consulting for a K-12 online education platform, covering tooling access, vulnerability policy and web security.
- Conducted access reviews across the entire toolset used by the company, enforcing least-privilege permissions for every user and service.
- Wrote the vulnerability management policy documentation required by the PCI-DSS Qualified Security Assessor (QSA) assessment.
- Analyzed source repositories and public web endpoints for security weaknesses and reported remediation plans to engineering.
Technologies: IT Security, C#, C#.NET, Kubernetes, Certified Information Systems Auditor (CISA), CISM, CISSP, On-premise, .NET, GitLab, Ubuntu, PCI DSS, Cloud Security, Vulnerability Management, Access Review, Load Testing, YAML, GitOps, Office 365
AWS DevOps Architect
2024 - 2025
Dealermade Photo Studios
- Oversaw the entire AWS cloud environment of an automotive photo studio platform, advising the IT Director on infrastructure decisions.
- Reduced the AWS bill by 30% by identifying unused servers and resources, and by tracing bots that were inflating Amazon S3 costs.
- Implemented S3 Intelligent-Tiering on buckets holding over 80 million files, saving more than $6,000 per month.
- Migrated the company API from AWS Elastic Beanstalk to Amazon EKS, modernizing the deployment model.
- Updated and restructured Elasticsearch hosted on Amazon EKS, including cluster upgrades and security improvements.
- Implemented AWS Compute Optimizer across all instances to select the optimal EC2 types for every running workload.
- Managed GitOps processes and provided ongoing security and FinOps consulting for the cloud environment.
Technologies: Amazon Web Services (AWS), Elasticsearch, Kubernetes, Docker, CI/CD Pipelines, Scala, AWS IoT, Terraform, Terragrunt, Amazon EKS, AWS Fargate, Helm, AWS Elastic Beanstalk, Amazon EC2, Amazon S3 (AWS S3), Redis, Amazon CloudFront, Amazon Route 53, Amazon VPC, AWS ALB, Cloudflare, AWS Glue, Amazon Athena, Amazon Rekognition, Amazon CloudWatch, AWS Cost Explorer, GitHub Actions, Load Testing, Microsoft Teams, Squarespace, Cloud Monitoring, YAML, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), FinOps, Beanstalk, Content Delivery Networks (CDN), DNS, GitHub, ECS, Amazon Elastic Container Service (ECS), Microsoft 365, GitOps, Outlook, Ubuntu, Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Shell Script, Artificial Intelligence (AI), AI Tools, AI/ML Workloads, Office 365
AWS DevOps Architect
2024 - 2025
Phorum Inc
- Configured and managed the entire AWS infrastructure for an AI-driven chemical discovery platform.
- Implemented an AWS Landing Zone with AWS Control Tower as the governance foundation of the account structure.
- Deployed front-end and back-end services on Amazon ECS with Fargate, restricting back-end access to front-end services for security and service discovery.
- Designed CI/CD pipelines that deploy both the application and its infrastructure with Terraform during pipeline execution.
- Enabled the development team to control infrastructure deployment through environment variable gates in the pipeline.
- Implemented Machine Learning Operations (MLOps) with Ray.io to support the company machine learning workloads.
- Advised the CTO on infrastructure decisions, balancing cost, scalability and delivery speed.
Technologies: Amazon Web Services (AWS), DevOps, AWS DevOps, Infrastructure as Code (IaC), AWS IoT, Terraform, Docker, AWS Fargate, Ray.io, Machine Learning Operations (MLOps), AWS Control Tower, Amazon EC2, Amazon VPC, AWS NAT Gateway, AWS ALB, Amazon S3 (AWS S3), Amazon Elastic Block Store (EBS), Amazon CloudFront, Amazon Route 53, Amazon RDS, PostgreSQL, GitHub, GitHub Actions, Python, AWS Certificate Manager, Load Testing, YAML, Agentic Deployment, Amazon Virtual Private Cloud (VPC), Content Delivery Networks (CDN), DNS, ECS, Amazon Elastic Container Service (ECS), AWS IAM, Continuous Integration (CI), Continuous Delivery (CD), GitOps, Identity & Access Management (IAM), Machine Learning, Ray, AWS Landing Zone, Amazon Web Services (AWS), Virtual Private Cloud (VPC), Continuous Deployment, NAT, AWS IAM Identity Center, Office 365
MLOps Engineer
2024 - 2025
Dandelion Science
- Took over the AWS infrastructure of a neurotechnology company from previous management and stabilized the whole environment.
- Designed and implemented an MLOps architecture on AWS with Ray.io, supporting GPU workloads on NVIDIA instances.
- Restored broken development API functionality, unblocking the machine learning engineering team.
- Fixed the user onboarding and offboarding process in AWS using Google as the external identity source.
- Refactored legacy Terraform into reusable modules with Terragrunt, making the infrastructure repeatable across environments.
- Supported the infrastructure rollout for the Hoboken (USA) and Geneva (Switzerland) offices of the company.
Technologies: Amazon Web Services (AWS), DevOps, AWS DevOps, Amazon RDS, Amazon EC2, Amazon S3 (AWS S3), Terraform, GitHub, Machine Learning Operations (MLOps), Ray Cluster, AWS IoT, Terragrunt, Ray.io, Docker, PostgreSQL, Amazon Elastic Block Store (EBS), Amazon CloudFront, Amazon VPC, AWS NAT Gateway, NVIDIA CUDA, Python, Shell Script, Ubuntu, Amazon Linux 2, Hamachi VPN, Load Testing, Artificial Intelligence (AI), YAML, Large Language Models (LLMs), AI Agent Orchestration, AI/ML Workloads, Infrastructure as Code (IaC), VPN, Amazon Virtual Private Cloud (VPC), Linux, Content Delivery Networks (CDN), ECS, Amazon Elastic Container Service (ECS), GitOps, Machine Learning, Ray, Amazon Linux, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, AI Tools, AWS Cloud Operations, Office 365
AWS HIPAA Consultant
2024 - 2024
HoloRay
- Provided consulting on HIPAA implementation over AWS for a healthcare imaging company.
- Gave strategic guidance for deploying the application on AWS in full compliance with HIPAA guidelines.
- Advised on secure handling and storage of application and AWS logs, meeting HIPAA requirements for data integrity and auditability.
Technologies: AWS IoT, HIPAA, Amazon VPC, Amazon CloudWatch, AWS CloudTrail, AWS Config, AWS Control Tower, AWS Certificate Manager, Cloud Security, Compliance, YAML, Amazon Web Services (AWS), Amazon Virtual Private Cloud (VPC), Amazon Web Services (AWS), Virtual Private Cloud (VPC), Office 365
AWS HIPAA Consultant
2024 - 2024
BioCoach
- Configured and managed the entire AWS environment of a metabolic health mobile app for HIPAA compliance.
- Implemented an AWS Landing Zone tailored for HIPAA, with AWS Control Tower and AWS IAM Identity Center.
- Followed HIPAA guidelines meticulously, embedding the controls into the AWS infrastructure ahead of the compliance audit.
- Discovered several bugs in the main application during testing, helping secure it once the fixes were applied.
Technologies: Amazon Web Services (AWS), HIPAA Compliance, Amazon EC2, Amazon S3 (AWS S3), AWS IoT, HIPAA, Terraform, Docker, Kubernetes, AWS Fargate, Amazon VPC, AWS NAT Gateway, Amazon CloudFront, Amazon Route 53, AWS Control Tower, AWS IAM Identity Center, AWS CloudTrail, AWS Certificate Manager, GitHub, GitHub Actions, Amazon Elastic Block Store (EBS), Ubuntu, Load Testing, YAML, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Content Delivery Networks (CDN), DNS, ECS, Amazon Elastic Container Service (ECS), AWS IAM, GitOps, Identity & Access Management (IAM), AWS Landing Zone, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Office 365
Engineer
2024 - 2024
Amplify Group
- Migrated all corporate user accounts from Microsoft 365 to Google Workspace, including mailboxes, emails and calendars.
- Performed the DNS migration from Microsoft 365 back to GoDaddy and reorganized DNS management for the company.
- Configured DNS entries so the cutover to Google Workspace happened without downtime for the business.
- Migrated 50 GB of company data from OneDrive to Google Drive with no loss of content.
Technologies: Mail Servers, DNS, SMTP, Server Migration, Migration, IMAP, GoDaddy, DNS Servers, Microsoft OneDrive, OneDrive, OneDrive API, Email, Google Workspace, Outlook, Microsoft Outlook, Networking, Networks, Architecture, Gmail, Microsoft 365, Google Drive, AWS IoT, Amazon VPC, Ubuntu, YAML, Amazon Web Services (AWS), Amazon Virtual Private Cloud (VPC), Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cloud Operations, Office 365
AWS DevOps Architect
2024 - 2024
YourTango
- Configured the AWS Landing Zone for a high-traffic digital media publisher running a LAMP stack with NGINX.
- Migrated all applications from DigitalOcean to AWS in only 20 hours, with no extended downtime for the publication.
- Migrated the production databases from DigitalOcean to Amazon RDS in a few hours.
- Implemented autoscaling on AWS for the newly migrated workloads, which was not possible on the previous provider.
Technologies: LAMP, NGINX, Linux, DigitalOcean, Apache, Cloud, Memcached, MySQL, NFS, AWS IoT, Amazon EC2, Amazon RDS, Amazon VPC, AWS NAT Gateway, AWS ALB, Amazon CloudFront, Amazon Route 53, Amazon EFS, PHP, Ubuntu, AWS Certificate Manager, YAML, Amazon Web Services (AWS), Amazon Virtual Private Cloud (VPC), Content Delivery Networks (CDN), DNS, AWS IAM, Identity & Access Management (IAM), AWS Control Tower, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, AWS IAM Identity Center, Office 365
AWS DevOps Architect
2024 - 2024
Jason Bulluck LLC
- Supported the AWS infrastructure of the client and resolved the outstanding issues affecting the website.
- Refined web server configuration so the application starts automatically after any server reboot, preventing further downtime.
- Reviewed the AWS environment, terminating unnecessary services and significantly reducing operational cost.
- Provided AWS training to the business owner so he could manage the environment with confidence.
Technologies: Amazon Web Services (AWS), AWS DevOps, DevOps, AWS IoT, Amazon EC2, Amazon VPC, AWS NAT Gateway, VPN, Amazon Route 53, NGINX, Ubuntu, AWS Certificate Manager, FinOps, YAML, Amazon Virtual Private Cloud (VPC), DNS, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Office 365
AWS DevOps Architect
2024 - 2024
HeroikStrategies LLC
- Configured and managed the entire AWS infrastructure for an AI project, from account governance to application delivery.
- Implemented an AWS Landing Zone with AWS Control Tower to standardize accounts and guardrails.
- Deployed front-end and back-end services on Amazon ECS, restricting back-end access to front-end services for security and service discovery.
- Designed pipelines that deploy application and infrastructure together, using Terraform for infrastructure changes during the run.
- Provided infrastructure recommendations to the CTO, supporting decisions on cost and scalability.
Technologies: Amazon Web Services (AWS), AWS DevOps, Python, Terraform, Infrastructure as Code (IaC), GitHub Actions, DevOps, AWS IoT, Docker, AWS Fargate, AWS Control Tower, Amazon EC2, Amazon VPC, AWS NAT Gateway, AWS ALB, Amazon S3 (AWS S3), Amazon Elastic Block Store (EBS), Amazon CloudFront, Amazon Route 53, Amazon RDS, PostgreSQL, GitHub, AWS Certificate Manager, Load Testing, YAML, Amazon Virtual Private Cloud (VPC), Content Delivery Networks (CDN), DNS, ECS, Amazon Elastic Container Service (ECS), AWS IAM, Continuous Integration (CI), Continuous Delivery (CD), GitOps, Identity & Access Management (IAM), AWS Landing Zone, Amazon Web Services (AWS), Virtual Private Cloud (VPC), Continuous Deployment, NAT, AWS IAM Identity Center, Office 365
AWS Consultant
2024 - 2024
Gynisus Inc.
- Resolved a critical disk space issue on the production machine learning system with a strategic disk expansion, restoring service.
- Conducted a connectivity and security assessment of the AWS environment, leading to the implementation of a VPN solution.
- Delivered hands-on AWS training on network resources so the client team could operate the environment independently.
Technologies: Amazon Web Services (AWS), Databases, AWS IoT, Amazon VPC, VPN, Amazon EC2, AWS Certificate Manager, Networking, Cloud Security, YAML, Amazon Virtual Private Cloud (VPC), Machine Learning, Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cloud Operations, Office 365
AWS Cloud Architect
2024 - 2024
No-L Systems
- Designed and implemented the company network project on AWS, delivered end-to-end with Terraform.
- Implemented a multicast network on AWS using Transit Gateway, a pattern not natively available in most cloud designs.
- Configured a Unicast-to-Multicast forwarder between the AWS N. Virginia and Tokyo regions.
- Architected a complex AWS network with 18 subnets, including ACLs, routing tables, and all supporting network components.
Technologies: Amazon Web Services (AWS), AWS Certified Developer, AWS Certified Advanced Networking - Specialty, AWS IoT, Terraform, Amazon VPC, AWS Transit Gateway, Multicast, AWS NAT Gateway, AWS ALB, Amazon EC2, Amazon Route 53, AWS Certificate Manager, GitLab, Python, Shell Script, NGINX, Ubuntu, Load Testing, YAML, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), DNS, GitOps, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, AWS Cloud Operations, Office 365
AWS DevOps Architect
2023 - 2024
Stern Pinball, Inc.
- Managed the entire AWS infrastructure of a connected pinball machine manufacturer across all regions.
- Reduced the monthly AWS bill by over $8,000 USD applying FinOps practices to instances, storage and idle resources.
- Imported the entire infrastructure into Terraform (four complete environments with cross-region resources) and moved the company to IaC management.
- Implemented an AWS Landing Zone with AWS IAM Identity Center, standardizing accounts and access across the organization.
- Configured AWS Session Manager to eliminate SSH access to company EC2 instances, and rolled out AWS Client VPN for employees.
- Connected the Stern headquarters to AWS with Site-to-Site VPN and linked multiple AWS regions through Transit Gateway.
- Designed a solution allowing pinball machines to request temporary IAM access to upload logs to Amazon S3, with automatic expiry.
- Built a complete UAT environment mirroring production and load tested it with Locust before releases.
Technologies: DevOps, AWS DevOps, Amazon Web Services (AWS), Python, Cloud Native, CI/CD Pipelines, Docker, AWS IAM, AWS ELB, Testing, Git, Automation, DNS, PostgreSQL, MySQL, Redis, Amazon DynamoDB, Infrastructure as Code (IaC), AWS IoT, Terraform, Amazon EC2, AWS Lambda, Amazon VPC, AWS Transit Gateway, Site-to-site VPN, AWS VPN, Amazon S3 (AWS S3), Amazon EFS, Amazon RDS, AWS Session Manager, AWS Control Tower, AWS IAM Identity Center, Amazon CloudWatch, GitHub Actions, NGINX, Locust, Load Testing, Microsoft Teams, Cloud Monitoring, YAML, Automation Testing, VPN, Amazon API Gateway, Amazon Route 53, AWS ALB, Amazon Virtual Private Cloud (VPC), FinOps, Content Delivery Networks (CDN), AWS Command Line Interface (CLI), Confluence, Jira, GitHub, ECS, Amazon Elastic Container Service (ECS), Microsoft 365, GitOps, AWS Glue, Outlook, Apache, Memcached, Sentry, Ubuntu, Identity & Access Management (IAM), Amazon CloudFront, AWS Landing Zone, SSH, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Shell Script, Office 365
AWS HIPAA Consultant
2023 - 2024
FormulaRX
- Configured and managed the entire AWS environment of a healthcare platform for HIPAA compliance.
- Implemented an AWS Landing Zone adapted for HIPAA, with AWS Control Tower and AWS IAM Identity Center.
- Integrated HIPAA guidelines into the AWS infrastructure to prepare the company for its compliance audit.
- Discovered several bugs in the main application while assisting with testing, helping secure it after the fixes.
Technologies: Amazon Web Services (AWS), Amazon EC2, Amazon S3 (AWS S3), AWS IAM, HIPAA Compliance, AWS IoT, HIPAA, Terraform, Docker, Kubernetes, AWS Fargate, Amazon VPC, AWS NAT Gateway, Amazon CloudFront, Amazon Route 53, AWS Control Tower, AWS IAM Identity Center, AWS CloudTrail, AWS Certificate Manager, GitHub, GitHub Actions, Amazon Elastic Block Store (EBS), Ubuntu, Load Testing, YAML, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Content Delivery Networks (CDN), DNS, ECS, Amazon Elastic Container Service (ECS), GitOps, Identity & Access Management (IAM), AWS Landing Zone, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, AWS Cloud Operations, Office 365
Senior Cloud Specialist
2023 - 2024
Out.cloud
- Designed cloud projects and architectures for United Nations agencies while serving as an Out.cloud contractor for the United Nations International Computing Centre (Senior Cloud Specialist).
- Oversaw the cloud architecture of the UNDP AIDA 2.0 project, ensuring the infrastructure followed AWS best practices.
- Designed a secure login approach for EC2 instances using Session Manager, separating access levels between UNICC users and external users.
- Assisted UN agencies in Kiribati and Sierra Leone in establishing their first AWS presence.
- Conducted a Proof of Concept for AWS Network Firewall with Transit Gateway, and produced UNICC documentation for GCP resources.
- Provided security and FinOps consulting, plus technical documentation and tutorials on AWS and GCP usage for engineering teams.
Technologies: AWS IoT, Google Cloud Platform (GCP), Azure, Terraform, Terragrunt, AWS CloudFormation, Kubernetes, Amazon EKS, AWS Fargate, Amazon EC2, AWS Lambda, Amazon VPC, AWS Transit Gateway, Amazon S3 (AWS S3), Amazon RDS, Amazon Simple Queue Service (SQS), Amazon Textract, Amazon Rekognition, AWS Security Hub, AWS Control Tower, AWS IAM Identity Center, GitHub Actions, AWS Landing Zone, AWS Marketplace, Bitbucket, Load Testing, Microsoft Teams, Cloud Monitoring, YAML, Multi-tenant Architecture, Amazon Web Services (AWS), Infrastructure as Code (IaC), Windows Subsystem for Linux (WSL), Amazon API Gateway, Amazon Route 53, AWS ALB, Amazon Virtual Private Cloud (VPC), FinOps, Python, Content Delivery Networks (CDN), AWS Command Line Interface (CLI), DNS, Cloud Architecture, Confluence, Jira, GitHub, ECS, Amazon Elastic Container Service (ECS), GitLab, AWS IAM, Continuous Integration (CI), Continuous Delivery (CD), Microsoft 365, AWS CodeBuild, GitOps, OneDrive, Amazon Elastic Block Store (EBS), Ubuntu, Identity & Access Management (IAM), Google Cloud, Amazon CloudFront, AWS Config, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Shell Script, Amazon EFS, Amazon Elastic Container Registry (ECR), Artificial Intelligence (AI), AWS Cloud Operations, Office 365
AWS DevOps Architect
2023 - 2023
Premier Lacrosse League
- Managed the AWS infrastructure of a professional sports media platform, including production issues during live games.
- Restructured the infrastructure to support over 8,000 concurrent spectators at game time by scaling Amazon EKS and Amazon RDS.
- Implemented an AWS Landing Zone with AWS IAM Identity Center across the organization accounts.
- Refactored GitOps workflows and deployment pipelines on GitHub Actions, making releases predictable.
- Became the company Subject Matter Expert for AWS, advising directors during decision making.
- Provided FinOps analysis and cost optimization recommendations for the cloud environment.
Technologies: AWS DevOps, Kubernetes, AWS Lambda, AWS Certified DevOps Engineer, Amazon Web Services (AWS), Redis Cache, AWS IoT, Terraform, Amazon EKS, Helm, Docker, Amazon EC2, Amazon RDS, PostgreSQL, Amazon Aurora, Amazon VPC, AWS NAT Gateway, AWS ALB, Amazon CloudFront, Amazon Route 53, Amazon S3 (AWS S3), Amazon CloudWatch, Sentry, AWS X-Ray, AWS Control Tower, AWS IAM Identity Center, GitHub Actions, Node.js, Next.js, Load Testing, YAML, Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), FinOps, Content Delivery Networks (CDN), AWS Command Line Interface (CLI), DNS, GitHub, AWS IAM, AWS ELB, Bash, GitOps, AWS CloudTrail, Amazon Elastic Block Store (EBS), Ubuntu, Identity & Access Management (IAM), Ray, AWS Landing Zone, Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Office 365
Infrastructure Automation Specialist
2023 - 2023
CONTAX Inc.
- Developed Shell Script automation to manage file transfers between mount points on an SFTP server used by SAP workflows.
- Connected multiple servers through local mount points and network file shares, so files move reliably without manual intervention.
- Delivered and documented the automation on CentOS servers running in AWS, handing over a solution the client team could maintain.
Technologies: Bash, SFTP, SSH, Linux, SAP, System Administration, Shell Script, CentOS, AWS IoT, Automation, YAML, Amazon Web Services (AWS), Amazon Web Services (AWS), AWS Cloud Operations, Office 365
AWS DevSecOps Architect
2023 - 2023
ZOE Films
- Reviewed the AWS infrastructure to assess the damage caused by a security breach in the production account.
- Performed damage analysis across all AWS regions after resource abuse, and wrote automated scripts to remove the illicitly deployed resources.
- Analyzed AWS CloudTrail logs to reconstruct the incident timeline and identify the attacker entry points.
- Hardened the AWS account security so the application relaunch followed AWS best practices.
Technologies: DevOps, Amazon Web Services (AWS), AWS DevOps, Cloud Security, Amazon EC2, SSL, Node.js, AWS Command Line Interface (CLI), Docker, Kubernetes, Python, React, AWS IoT, AWS CloudTrail, AWS WAF, Amazon Lightsail, Amazon VPC, Amazon S3 (AWS S3), Incident Response, Load Testing, YAML, Amazon Virtual Private Cloud (VPC), Web Application Firewall (WAF), Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cloud Operations, Office 365
AWS Cloud Architect
2015 - 2023
Duoshiro
- Implemented VMware Cloud on AWS for abastece ai as a DUOSHIRO contractor and AWS Solutions Architect, migrating on-premises workloads for a loyalty program with 22 million members.
- Designed the world's first non-managed planned failover for Amazon RDS for abastece ai as a DUOSHIRO contractor, later showcased by AWS at AWS Summit and in a blog post.
- Designed AWS infrastructure for Maestria as a DUOSHIRO contractor and AWS Cloud Architect, storing more than 50 million files and including an ETL pipeline using DynamoDB, Lambda, Glue, and Athena, plus a private Milvus cluster on Amazon EKS.
- Implemented an AWS Landing Zone with IAM Identity Center and delivered CI/CD using GitHub Actions and Serverless Framework for Blue Saturn as a DUOSHIRO contractor and AWS Cloud Architect.
- Designed an AWS Client VPN and end-to-end VPC solution for a Dubai-based client while consulting for Curva through DUOSHIRO, and led company-wide Terraform adoption.
- Migrated on-premises workloads to AWS for Lexnautas as a DUOSHIRO contractor, implementing the environment with Terraform and delivering a comprehensive TCO analysis.
- Migrated the entire CarroAluguel.com infrastructure from Locaweb to AWS as a DUOSHIRO contractor, reducing costs by 50% and improving performance by 40%.
- Reduced AWS costs by 30% and built an IoT tractor monitoring system with Zabbix dashboards for Agrotopus as a DUOSHIRO contractor, opening a new business line.
- Built API integrations between eCommerce platforms in-house at DUOSHIRO, including the first online franchise system on Nuvemshop and a migration bridge from XTech.
- Built more than 50 Nuvemshop stores from scratch in-house at DUOSHIRO, creating the platform's first fully customized product experience and digital product delivery with on-the-fly PDF generation.
Technologies: AWS IoT, Terraform, Amazon EC2, Amazon S3 (AWS S3), Amazon RDS, PostgreSQL, MySQL, Amazon VPC, AWS VPN, VMware on AWS, AWS Lambda, Amazon DynamoDB, Amazon EKS, Kubernetes, Docker, AWS Glue, Amazon Athena, Elasticsearch, AWS Control Tower, AWS IAM Identity Center, GitHub Actions, Serverless Framework, Zabbix, PHP, AWS Amplify, AWS Database Migration Service (DMS), AWS Marketplace, Amazon EventBridge, Azure Active Directory, Bitbucket, Blockchain, Citrix, Docker Compose, F5 Networks, Google Tag Manager, Heroku, Laravel, Load Testing, Microsoft Teams, Milvus, Postfix, Raspberry Pi, SIM Cards, Trello, Twig, Unity, VMware, WebSphere, Cloud Monitoring, Software Engineering, Front-end Development, YAML, Full-stack Development, AWS Cloud Architecture, Enterprise Architecture, Startups, Infrastructure Monitoring, REST, Cost Reduction & Optimization (Cost-down), Cloud Infrastructure, Shell Scripting, Site Reliability Engineering (SRE), Backup & Recovery, Disaster Recovery Plans (DRP), DevOps Engineer, Solution Architecture, APIs, Containers, Containerization, Security, Computer Networking, Orchestration, Cloud Engineering, Cloud Migration, Network Architecture, TCP/IP, Cybersecurity, Web Scalability, Scalability, Infrastructure, Load Balancers, Infrastructure as a Service (IaaS), IP Networks, OpenVPN, Cloud Gateway, Monitoring, Business Continuity & Disaster Recovery (BCDR), Microservices Architecture, Transport Layer Security (TLS), Database Security, Provisioning Tools, Logging, Linux Administration, Serverless, Serverless Architecture, Scripting Languages, CloudOps, Scripting, Network Security, Apache HTTP Server, Audits, AWS Cloud Computing Services, SecOps, Cloud FinOps, Troubleshooting, SaaS, AWS Cloud Security, IT Administration, NoSQL, Bash Script, Performance, Cloud, APIs, Infrastructure Security, Network Engineering, Cloud Networking, Scalable Architecture, AWS ECS Fargate, Backups, Performance Tuning, Version Control, Version Control Systems, GCP DevOps, Documentation, IT Infrastructure Management (ITIM), AWS Deployment, Virtual Machines, Private Clouds, Performance Optimization, Observability, Virtualization, Vulnerability Scanning, PHP 7, eCommerce, Digital Commerce, Web Platforms, Citrix ZenServer, Dell PowerEdge Servers, Videos, Fortinet Firewall Configuration, Red Hat OpenShift, Office 365, VMware Cloud on AWS
AWS Cloud Architect
2022 - 2022
Centric Consulting
- Fixed security issues in AWS Lambda functions for Grange Insurance while serving as an AWS Cloud Architect through Centric Consulting.
- Led a security effort that fixed over 100 issues and vulnerabilities in Lambda functions, earning recognition from company directors.
- Migrated 12 AWS accounts to AWS Control Tower without any service interruption.
- Integrated advanced security solutions, including BeyondTrust Password Safe and Palo Alto Prisma Cloud, into the cloud environment.
- Designed a new approach for developers to manage their own infrastructure through Terraform.
- Produced HLD/LLD architecture documentation and best practice templates for SysOps teams, covering automation, CI/CD, monitoring and incident response.
Technologies: AWS IoT, Terraform, AWS Lambda, Amazon EC2, Amazon VPC, Amazon S3 (AWS S3), Docker, AWS Control Tower, Single Sign-on (SSO), BeyondTrust Password Safe, Palo Alto Prisma Cloud, AWS Certificate Manager, Python, Bash, Git, CentOS, Ubuntu, Cloud Security, CI/CD Pipelines, Load Testing, Cloud Monitoring, YAML, Amazon Web Services (AWS), Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), Confluence, Continuous Integration (CI), Continuous Delivery (CD), Microsoft 365, Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), Incident Response, Office 365
AWS Cloud Architect
2022 - 2022
Caylent
- Designed a new AWS infrastructure architecture for F45 Training's existing fitness platform as an AWS Cloud Architect through Caylent.
- Replaced the previous architect on short notice and delivered the AWS architecture and CI/CD pipelines in less than two weeks.
- Designed a CI/CD architecture using AWS DevTools and Terraform, incorporating manual production approval gates and Infracost pricing validation in the testing environment.
- Created application and infrastructure pipelines and built ephemeral test environments from scratch to reduce costs.
- Led the engineering team through the deployment of the infrastructure solution.
Technologies: AWS IoT, Terraform, Docker, Amazon Elastic Container Registry (ECR), AWS Fargate, Amazon EC2, Amazon RDS, PostgreSQL, Amazon Aurora, Amazon DynamoDB, Elasticsearch, Redis, Memcached, Amazon Simple Queue Service (SQS), Amazon VPC, AWS ALB, Amazon CloudFront, Amazon Route 53, Amazon S3 (AWS S3), Amazon CloudWatch, AWS Control Tower, GitHub Actions, Infracost, Load Testing, YAML, Leadership, Technical Leadership, Amazon Web Services (AWS), Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), CI/CD Pipelines, Content Delivery Networks (CDN), DNS, GitHub, ECS, Amazon Elastic Container Service (ECS), Bash, Continuous Integration (CI), Continuous Delivery (CD), GitOps, AWS CloudTrail, Amazon Elastic Block Store (EBS), Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), NAT, Office 365
AWS Consultant
2015 - 2015
Gradleware
- Designed the log aggregation architecture used for analytics across the client environment on AWS.
- Implemented the ELK Stack (Elasticsearch, Logstash, and Kibana) on AWS for log visualization and analytics.
- Provisioned the supporting AWS infrastructure with Amazon EC2, Amazon VPC, Amazon EBS, and Amazon S3, secured with IAM and KMS.
Technologies: AWS IoT, Elasticsearch, Logstash, Kibana, ELK (Elastic Stack), Amazon EC2, Amazon VPC, Amazon Elastic Block Store (EBS), Amazon S3 (AWS S3), AWS Key Management Service (KMS), Ubuntu, YAML, Amazon Web Services (AWS), Amazon Virtual Private Cloud (VPC), Identity & Access Management (IAM), Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cloud Operations, Office 365
IT Infrastructure & Security Manager
2014 - 2015
MalaPronta.com
- Managed the local and AWS IT resources of an online travel company, leading a team of three engineers.
- Led the IT changes required for PCI-DSS certification compliance across the company infrastructure.
- Integrated the AWS and on-premises environments so developers and the QA team could work against a single hybrid setup.
- Implemented a Zabbix monitoring system with autoscaling coverage for the entire AWS environment.
- Created an automated QA environment on AWS that ran only on business days during business hours, cutting costs.
- Implemented a DDoS protection solution to defend the email application against attacks.
- Supported the customer service office for the 2016 Olympics, coordinating logistics, IT support and client relations.
Technologies: AWS IoT, Amazon EC2, EC2 Auto Scaling, Amazon VPC, Amazon RDS, PostgreSQL, Amazon S3 (AWS S3), Amazon Elastic Block Store (EBS), Amazon CloudFront, Amazon Route 53, AWS ELB, Web Application Firewall (WAF), Snort, Zabbix, Nagios, New Relic, Jenkins, NGINX, Apache, Apache Tomcat, Memcached, CentOS, Windows Server, PCI DSS, Amazon Linux, Load Testing, Cloud Monitoring, Hardware Provisioning, YAML, Amazon Web Services (AWS), AWS ALB, Amazon Virtual Private Cloud (VPC), Linux, HTML, Content Delivery Networks (CDN), DNS, Confluence, Jira, Bash, Continuous Integration (CI), Continuous Delivery (CD), Microsoft 365, SSL, CCTV, Mail Servers, SMTP, Ubuntu, Identity & Access Management (IAM), SSL Certificates, Amazon Web Services (AWS), Virtual Private Cloud (VPC), Shell Script, Dell PowerEdge, Technical Leadership, AWS Cloud Operations, Video Surveillance, Office 365
IT Analyst
2014 - 2014
Verti Tecnologia Ltda.
- Managed the IT resources needed for the PCI-DSS certification renewal, reviewing all office hardware equipment.
- Assisted in implementing a new in-office data center, including structured cabling and a security camera system.
- Deployed a hypervisor platform on Dell PowerEdge hardware for the company's workloads.
- Executed load tests on the company applications running on Amazon Web Services (AWS).
Technologies: AWS IoT, Amazon VPC, Citrix XenServer, Dell PowerEdge, Shell Script, Ubuntu, PCI DSS, Data Center, Structured Cabling, CCTV, SSL Certificates, Hardware Provisioning, YAML, Amazon Web Services (AWS), Amazon Virtual Private Cloud (VPC), SSL, Citrix, Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cloud Operations, Video Surveillance, Office 365
Cloud Linux System Administrator
2013 - 2014
GMCE - Golden Mountain Consultoria Empresarial
- Managed AWS environments for the consultancy clients, implementing web servers and deploying applications.
- Implemented a financial application on Amazon EC2 across development, UAT, and production environments.
- Created an Apache reverse proxy in front of a client financial application to secure and route traffic.
- Configured IT resources with Shell Script and Ansible, moving repetitive set up work to automation.
- Developed the company website on a Drupal and PHP stack with MySQL.
Technologies: AWS IoT, Amazon EC2, Amazon VPC, Ansible, Apache, MySQL, Drupal, PHP, Shell Script, Ubuntu, SSL Certificates, Linux, Load Testing, YAML, Amazon Web Services (AWS), Infrastructure as Code (IaC), Amazon Virtual Private Cloud (VPC), SSL, Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cloud Operations, Office 365
YouVersion Global Documentation Manager & Brazilian Support Manager
2013 - 2014
LifeChurch.tv
- Managed support agents and translators across the Brazilian and global YouVersion teams.
- Owned application documentation management at a global level for the YouVersion Bible app.
- Migrated hundreds of documentation articles written in more than five languages into the new help center.
Technologies: Zendesk, Documentation Management, Localization, Team Management, Content Migration, Customer Support, Remote Work, YAML, Office 365
YouVersion Brazilian Support Manager
2013 - 2013
LifeChurch.tv
- Led a team of 5+ support agents and translators responsible for Brazilian Portuguese support documentation.
- Kept the Brazilian support queue under control, ensuring timely responses to users of the YouVersion Bible app.
- Translated and deployed technical support documentation for the Brazilian Portuguese audience.
- Led the team that was recognized as the best support team in the company.
Technologies: Zendesk, Team Management, Customer Support, Technical Documentation, Localization, Remote Work, YAML, Office 365
Web Developer
2012 - 2013
Edu Fernandes Design e Producao
- Performed web development for agency client projects, from initial setup through to delivery.
- Built and maintained client websites on content management systems such as WordPress and Drupal.
- Developed PHP applications with MySQL for clients that required custom integrations.
Technologies: PHP, MySQL, WordPress, Drupal, HTML, CSS, Apache, Ubuntu, Shell Script, DNS, Front-end Development, YAML, Office 365
YouVersion Brazilian Portuguese Translator & Support Analyst
2011 - 2013
LifeChurch.tv
- Translated YouVersion mobile app strings from English into Brazilian Portuguese for one of the world's most downloaded apps.
- Managed the Brazilian Portuguese support queue for the YouVersion Bible app, handling front-line user requests.
- Reported to a US-based manager and collaborated with teams across multiple countries and time zones.
Technologies: Zendesk, Localization, Translation, Customer Support, Remote Work, English, Portuguese, YAML, Office 365
Chief Systems Administrator
2010 - 2013
Kii Corporation
- Led cloud infrastructure across AWS, Rackspace, OVHcloud, and IIJ after the merger of Servo Software (USA) and Synclore (Japan).
- Consolidated the distinct AWS architectures inherited from acquired startups into a unified, scalable, and resilient corporate environment.
- Migrated the IT estate from the legacy company into the new organization with no loss of service.
- Implemented a company-wide single sign-on system using Atlassian Crowd with LDAP integration.
- Created an automated server recovery system using Zabbix, reducing manual intervention during incidents.
- Adopted ITIL v3 practices in the infrastructure division and provided systems administration guidance to incubated companies.
- Developed an internal web system for partner collaboration using PHP, JavaScript and MySQL.
- Assisted Universal Pictures in blocking unauthorized VPN access to copyrighted movies.
Technologies: AWS IoT, Rackspace, OVH, IIJ, Amazon EC2, AWS Auto Scaling, AWS Elastic Beanstalk, Amazon S3 (AWS S3), Amazon Elastic Block Store (EBS), Amazon VPC, AWS ELB, Zabbix, LDAP, Atlassian Crowd, MySQL, Apache, NGINX, Apache Tomcat, Drupal, Git, Subversion (SVN), PHP, JavaScript, ITIL, Ubuntu, Front-end Development, YAML, Amazon Web Services (AWS), VPN, Amazon Virtual Private Cloud (VPC), HTML, CSS, Beanstalk, DNS, Confluence, Jira, Bash, GitOps, CentOS, SSL, Single Sign-on (SSO), SMTP, Identity & Access Management (IAM), SSL Certificates, Amazon Web Services (AWS), Virtual Private Cloud (VPC), Shell Script, AWS Cloud Operations, Shell Scripting, Computer Networking, Network Architecture, TCP/IP, Infrastructure, Load Balancers, IP Networks, Linux Administration, Scripting Languages, Scripting, Apache HTTP Server, Troubleshooting, IT Administration, Bash Script, Network Engineering, Backups, IT Infrastructure Management (ITIM), Virtual Machines, Virtualization, Office 365
Knowledge Analyst 1 - Support
2010 - 2011
Oracle Corporation Brazil
- Transitioned to Oracle as a specialized technical resource after the acquisition of Sun Microsystems, owning legacy system support.
- Supported and maintained Solaris and Java digital course platforms, both current and legacy systems inherited from Sun.
- Implemented Oracle educational courses for academic institutions worldwide.
- Provided tier 1 support for the company's digital course platform and its clients.
- Redesigned the Oracle Learning Support email template used in customer communication.
Technologies: Solaris, Java, HTML, CSS, Shell Script, Bash, Apache, Ubuntu, SSL Certificates, Learning Management Systems (LMS), Technical Support, YAML, SSL, Oracle Solaris
Linux Systems Administrator and Web Developer
2010 - 2010
Servo Software
- Managed hybrid cloud environments on AWS and Rackspace for a mobile software startup.
- Executed the cloud migration from Servo/Synclore into the newly formed Kii Corporation.
- Performed hybrid cloud cost analysis with AWS Cost Explorer and Rackspace Cloudalytics, adding budget controls and resource optimization.
- Created a PHP portal integrated with LDAP to handle user management and configuration of onboarding and offboarding.
Technologies: AWS IoT, Rackspace, Amazon EC2, Amazon S3 (AWS S3), Amazon RDS, Amazon VPC, Apache, NGINX, Apache Tomcat, LDAP, PHP, Shell Script, Bash, Ubuntu, CentOS, Git, Subversion (SVN), FinOps, YAML, Amazon Web Services (AWS), Amazon Virtual Private Cloud (VPC), HTML, CSS, Confluence, Jira, GitOps, SSL, SSL Certificates, Amazon Web Services (AWS), Virtual Private Cloud (VPC), AWS Cost Explorer, AWS Cloud Operations
Application Support Administrator
2007 - 2010
Sun Microsystems
- Supported the learning applications used by internal users, through to the acquisition of Sun Microsystems by Oracle in 2010.
- Deployed Solaris and Java digital courses in LMS platforms, serving employees, clients, and partners worldwide.
- Built automation tools and scripts for digital course deployment, cutting deployment time from 30 minutes to 2 minutes.
- Accelerated the release of critical hotfixes for legacy learning management systems, keeping course content available globally.
- Received five Outstanding Work (IDOL) awards for contributions to e-learning innovation and excellence.
Technologies: Java, PHP, Shell Script, Bash, HTML, CSS, JavaScript, Solaris, CentOS, Ubuntu, Apache, Apache Tomcat, NGINX, Drupal, Rackspace, Git, Subversion (SVN), Confluence, Jira, SSL Certificates, iMacros, YAML, SSL, Learning Management Systems (LMS), Oracle Solaris
Web Developer
2004 - 2005
AUDREY DUARTE Design, Comunicação
- Developed client websites using Macromedia Dreamweaver, CorelDRAW, and Adobe Photoshop.
- Configured and maintained Apache HTTP web servers running on Windows for the hosted clients.
- Registered and managed .com.br and .org.br domains for the client web projects.
- Developed web tools and interactive page features using JavaScript.
Technologies: HTML, CSS, JavaScript, Apache, DNS, Macromedia Dreamweaver, Adobe Photoshop, CorelDRAW, Web Development, YAML
Project History
Design of the First AWS RDS Aurora Cluster Managed Unplanned Failover
As a cloud architect, I implemented a unique failover solution for the RDS Aurora cluster to meet the high availability and disaster recovery requirements of a Brazilian digital wallet processing millions of transactions per week. My solution—known as the "managed unplanned failover"—is designed to automatically switch the write node to another region in seconds in case of failure, ensuring continuous database availability. This solution's effectiveness caught AWS Brazil's attention, resulting in a post on the AWS official blog and an opportunity to present it at the AWS Summit 2022.
Cloud-based Game Streaming
This project aimed to create a low-latency, high-performance cloud gaming solution using AWS EC2 instances to overcome the limitations of unavailable cloud gaming services in Brazil.
Technologies used:
AWS EC2
NVIDIA T4 GPU
Windows Server
Steam Gaming Platform
Project description:
In the early days of cloud-based game streaming, such services were unavailable in Brazil, and VPN solutions provided unplayable latencies. AWS EC2 instances equipped with Windows Server and NVIDIA T4 GPUs were leveraged to tackle this challenge.
The project was implemented in the São Paulo AWS region, which yielded a sub-3ms latency, ensuring a smooth gaming experience. Utilizing the high computational power of the NVIDIA T4 GPUs, the system could process and stream video flawlessly, enabling seamless gameplay of Steam games in real-time.
Outcome:
Successfully demonstrated that cloud-based gaming can be viable in regions where traditional cloud gaming services are unavailable, providing an optimized gaming experience with minimal latency and high-quality video processing.
Technologies used:
AWS EC2
NVIDIA T4 GPU
Windows Server
Steam Gaming Platform
Project description:
In the early days of cloud-based game streaming, such services were unavailable in Brazil, and VPN solutions provided unplayable latencies. AWS EC2 instances equipped with Windows Server and NVIDIA T4 GPUs were leveraged to tackle this challenge.
The project was implemented in the São Paulo AWS region, which yielded a sub-3ms latency, ensuring a smooth gaming experience. Utilizing the high computational power of the NVIDIA T4 GPUs, the system could process and stream video flawlessly, enabling seamless gameplay of Steam games in real-time.
Outcome:
Successfully demonstrated that cloud-based gaming can be viable in regions where traditional cloud gaming services are unavailable, providing an optimized gaming experience with minimal latency and high-quality video processing.
Cryptocurrency Mining Experimentation on AWS
To assess the financial viability and technical performance of using AWS EC2 instances for cryptocurrency mining during the peak of mining activities.
Technologies Used:
• AWS EC2
• NVIDIA T4 GPU
• CUDA
• SPOT instances
Project Description:
During the hype of cryptocurrency mining, this project aimed to evaluate the profitability and technical feasibility of mining using AWS resources. A small farm of EC2 instances equipped with NVIDIA T4 GPUs was set up for this purpose. CUDA was employed to optimize the mining processes. To maximize cost-efficiency, all instances operated in SPOT mode.
Outcome:
The project concluded that, despite using SPOT instances for cost reduction, the expenses of running the instances outweighed the gains from mining. However, the project provided valuable insights into the capabilities of CUDA for such resource-intensive tasks.
Technologies Used:
• AWS EC2
• NVIDIA T4 GPU
• CUDA
• SPOT instances
Project Description:
During the hype of cryptocurrency mining, this project aimed to evaluate the profitability and technical feasibility of mining using AWS resources. A small farm of EC2 instances equipped with NVIDIA T4 GPUs was set up for this purpose. CUDA was employed to optimize the mining processes. To maximize cost-efficiency, all instances operated in SPOT mode.
Outcome:
The project concluded that, despite using SPOT instances for cost reduction, the expenses of running the instances outweighed the gains from mining. However, the project provided valuable insights into the capabilities of CUDA for such resource-intensive tasks.
Education
2022 - 2026
Bachelor's Degree in Computer Engineering
Universidade Descomplica - Curitiba, Parana, Brazil
2012 - 2016
Bachelor's Degree in Computer Science
Universidade Paulista (UNIP) - Santos, Sao Paulo, Brazil
Certifications
NOVEMBER 2023 - NOVEMBER 2025
FOCP: FinOps Certified Practitioner
The Linux Foundation
OCTOBER 2022 - OCTOBER 2024
Oracle Cloud Infrastructure 2022 Certified Foundations Associate
Oracle University
OCTOBER 2022 - PRESENT
EF SET Certificate – C2 Proficient
EF Standard English Test
JANUARY 2022 - JANUARY 2024
HashiCorp Certified: Terraform Associate
HashiCorp
MAY 2021 - MAY 2024
AWS Certified Solutions Architect – Professional
Amazon Web Services (AWS)
MARCH 2019 - PRESENT
Sun Certified Solaris Associate
Sun Microsystems
JULY 2011 - PRESENT
ITIL V3 Certification
EXIN
MAY 2007 - PRESENT
Certificate of Competency in English (ECCE)
University of Michigan
Skills
Libraries/APIs
Node.js, OneDrive, Terragrunt, AWS Amplify, React, OneDrive API, Amazon Rekognition
Tools
VPN, Amazon Virtual Private Cloud (VPC), NGINX, Confluence, Jira, Git, AWS IAM, AWS ELB, Bitbucket, CloudOps, Apache, Amazon Elastic Block Store (EBS), AWS Deployment, Terraform, AWS CloudFormation, AWS Cloud Development Kit (CDK), Amazon CloudWatch, Zabbix, Jenkins, Beanstalk, AWS Command Line Interface (CLI), GitHub, VMware, Amazon Elastic Container Service (ECS), GitLab, Amazon EKS, AWS Fargate, Amazon Simple Queue Service (SQS), AWS CodeBuild, Provisioning Tools, Logging, Microsoft Outlook, AWS CloudTrail, Apache Tomcat, Sentry, Apache HTTP Server, Trello, Microsoft Teams, Amazon CloudFront, Docker Compose, AWS Key Management Service (KMS), Subversion (SVN), iMacros, Grafana, Amazon Elastic Container Registry (ECR), Amazon Simple Notification Service (SNS), ELK (Elastic Stack), OpenVPN, AWS Glue, Google Workspace, Helm, Postfix, Nagios, Google Kubernetes Engine (GKE), CorelDRAW, Adobe Photoshop, Amazon Athena, AWS Cost Explorer, Loki, RabbitMQ, Amazon Textract, Celery, Logstash, Kibana, Snort, Citrix XenServer, Ansible, Amazon Cognito, Claude Code, Sequelize, AWS Systems Manager
Languages
PHP, JavaScript, HTML, CSS, Bash, Bash Script, YAML, PHP 7, Python, SQL, Java, Python 3, TypeScript, Scala, C#, C#.NET
Paradigms
DevOps, Continuous Integration (CI), Continuous Delivery (CD), Testing, REST, Automation, DevSecOps, Microservices, Microservices Architecture, Serverless Architecture, Continuous Deployment, Load Testing, Event-driven Architecture, ITIL, HIPAA Compliance, Azure DevOps
Platforms
Amazon Web Services (AWS), Amazon EC2, Linux, Cloud Native, CentOS, LAMP, Ubuntu, AWS Cloud Computing Services, Solaris, AWS Lambda, Docker, AWS ALB, Windows Server, Kubernetes, WordPress, AWS Elastic Beanstalk, Oracle Cloud Infrastructure (OCI), DigitalOcean, Cloud Gateway, Google Cloud Platform (GCP), Azure, New Relic, Rackspace, Drupal, Zendesk, WebSphere, Red Hat OpenShift, Amazon Lightsail, OCI Vault, Heroku, Blockchain, Oracle Linux, Amazon Linux, Raspberry Pi, Citrix, AWS IoT, NVIDIA CUDA
Storage
MySQL, Amazon S3 (AWS S3), Databases, On-premise, Amazon DynamoDB, Redis, PostgreSQL, Database Security, Amazon Aurora, Oracle Cloud, Elasticsearch, Memcached, Google Cloud, NoSQL, Amazon EFS, Azure Active Directory, Redis Cache, OVH, Neo4j
Frameworks
Twig, Serverless Framework, .NET, Next.js, Unity, Laravel, Ray, Locust, LangGraph
Industry Expertise
Cybersecurity
Other
Infrastructure as Code (IaC), English, ITIL V3 Foundation Certified, AWS Cloud Architecture, Amazon RDS, Enterprise Architecture, AWS DevOps, Startups, Amazon Route 53, FinOps, Cost Reduction & Optimization (Cost-down), Cloud Infrastructure, Shell Scripting, DNS, Cloud Architecture, DevOps Engineer, Solution Architecture, Security, Computer Networking, Computer Science, Cloud Engineering, Cloud, Microsoft 365, GitOps, Networking, Network Architecture, Cloudflare, TCP/IP, Web Scalability, Scalability, Infrastructure, Load Balancers, Infrastructure as a Service (IaaS), SSL, IP Networks, Monitoring, IT Security, Server Migration, Migration, Linux Administration, Scripting Languages, DNS Servers, Networks, Scripting, Identity & Access Management (IAM), Troubleshooting, SaaS, IT Administration, Performance, SSL Certificates, Cloud, Amazon Web Services (AWS), Infrastructure Security, Virtual Private Cloud (VPC), Network Engineering, Cloud Networking, Portuguese, Scalable Architecture, Backups, Version Control, Version Control Systems, AWS NAT Gateway, Documentation, IT Infrastructure Management (ITIM), NAT, Virtual Machines, Performance Optimization, Observability, Virtualization, Shell Script, Amazon VPC, AWS Certificate Manager, Remote Work, Technical Documentation, Web Development, Full-stack Development, AWS Cloud Operations, Windows Subsystem for Linux (WSL), AWS Certified Solution Architect, AWS Transit Gateway, Amazon API Gateway, Infrastructure Monitoring, CI/CD Pipelines, Site Reliability Engineering (SRE), Cloud Security, Content Delivery Networks (CDN), AWS Auto Scaling, Architecture, ECS, APIs, Containers, Containerization, Firewalls, System Administration, GitHub Actions, eCommerce, Cloud Migration, Videos, API Gateways, Business Continuity & Disaster Recovery (BCDR), Transport Layer Security (TLS), Single Sign-on (SSO), Mail Servers, SMTP, Digital Commerce, Amazon EventBridge, Serverless, Microsoft OneDrive, Email, Outlook, AWS CodePipeline, NFS, Web Application Firewall (WAF), Network Security, Web Platforms, Audits, Multicast, Cloud FinOps, AWS Cloud Security, Office 365, AWS Control Tower, PCI DSS, IIJ, Oracle Solaris, AWS Marketplace, APIs, AWS ECS Fargate, Performance Tuning, Google Tag Manager, Compliance, Private Clouds, Vulnerability Management, Site-to-site VPN, Incident Response, Localization, Translation, LDAP, Atlassian Crowd, Technical Support, Cloud Monitoring, Software Engineering, Front-end Development, Deployment, Multi-tenant Architecture, AI Agent Orchestration, Agentic Deployment, AWS Organizations, AWS VPN, AWS Database Migration Service (DMS), Backup & Recovery, Disaster Recovery Plans (DRP), F5 Networks, Orchestration, Computer Engineering, GPU Computing, CCTV, Video Surveillance, SIM Cards, IMAP, GoDaddy, Gmail, SecOps, AWS Certified Developer, AWS Certified Advanced Networking - Specialty, FastConnect, FortiGate, Machine Learning Operations (MLOps), Machine Learning, Fortinet Firewall Configuration, Fortinet, STC Circuit, RHEL, Ray Cluster, Ray.io, Hamachi VPN, Squarespace, AWS Landing Zone, AWS Config, SFTP, SSH, SAP, Milvus, BeyondTrust Password Safe, Palo Alto Prisma Cloud, Citrix ZenServer, Dell PowerEdge Servers, Certified Information Systems Auditor (CISA), CISM, CISSP, GCP DevOps, HIPAA, Vulnerability Scanning, Macromedia Dreamweaver, AWS Secrets Manager, Access Review, Amazon Linux 2, OKE, Cloud Armor, F5 NGINX Ingress, OCI Bastion, GCP Secret Manager, Prometheus, Google Drive, AWS IAM Identity Center, AWS Security Hub, AWS WAF, AWS Session Manager, AWS Certified DevOps Engineer, AWS X-Ray, Amazon Bedrock AgentCore, LangChain, LangFuse, Infracost, VMware on AWS, EC2 Auto Scaling, Dell PowerEdge, Data Center, Structured Cabling, Documentation Management, Team Management, Content Migration, Customer Support, Learning Management Systems (LMS), SigNoz, Artificial Intelligence (AI), Hardware Provisioning, Automation Testing, Row-level Security (RLS), Large Language Models (LLMs), AI Agents, Agentic AI Systems, AI Tools, AI/ML Workloads, Leadership, Technical Leadership, VMware Cloud on AWS
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring