Specialist in corporate and multi-cloud solutions with over 16 years of experience in the technology field, focusing on infrastructure management, networking, device and server security, cloud applications, and migration services to the cloud (AWS). Actively involved in the digital transformation of significant companies across various sectors by applying best practices and technological innovation. 

Expertise as a SysAdmin includes configuring and managing servers (GNU/Linux, RHEL, Windows, FreeBSD), extensive knowledge of routers and switches (Cisco, Dell, HP), and proficiency with NGFW Firewalls (Pfsense, Fortinet, Checkpoint). Skilled in Active Directory (AD, Samba4), SQL databases (MSSQL, MySQL, PostgreSQL), and NoSQL databases (DynamoDB). Competence in indoor/outdoor WiFi solutions (Aruba, Ruckus, AeroHive, UniFi), Backup solutions (Netbackup), web servers (Apache, NGINX), DNS systems (Cloudflare, BIND, ADGuard, NXFilter), hypervisors (Vmware, Citrix Xenserver, XCP-ng), VoIP (Asterisk), and storage solutions (NAS, iSCSI, NFS). Holds a degree in Computer Networks and a postgraduate degree in Information Security.

Currently engaged in specializations in DevOps/DevSecOps with a focus on practical learning and continuous improvement. Proficient with tools such as GitHub, GitLab, Docker, Rancher, Kubernetes, Vagrant, Ansible, AWX, Terraform, Grafana, Elastic Cloud, and Zabbix, with emphasis on Serverless technology including AWS Lambda, AWS CloudFormation, AWS APIGateway, and AWS DynamoDB.

Previously served over 13 years in roles such as Infrastructure Analyst, Security Analyst, and IT Manager, focusing on leadership and mentoring young apprentices, many of whom have developed into outstanding technology professionals. Involved in continuous infrastructure improvement projects aimed at IT cost reduction (ITIL).

Actively participates in professional activities and projects, enjoys teaching and sharing knowledge, and has experience in educational roles. Enthusiastic about embracing challenges and achievements, and volunteers for humanitarian aid causes.

Management of High Potential Professionals

 at FM2S Educação e Consultoria
2/1/2022

 at FM2S Educação e Consultoria
12/1/2021

Remote Leadership: How to Manage and Develop Distributed Teams

 at Institute of Management and Information Technology
2022 - 2022

Strategic Business and Services Management


6/1/2022 - 9/1/2022

Successfully managed Checkpoint Firewall, creating and optimizing rules for enhanced performance and security. Led efforts to optimize datacenter and network infrastructure resources, ensuring efficient and reliable operations. Conducted OS upgrades for VMs and hypervisors, applying necessary security patches to maintain system integrity. Designed and managed backup routines for virtualized environments and SQL databases, ensuring critical data was secured and recoverable. Updated critical monitoring software including Zabbix and Elastic, and used Grafana for monitoring internal and external assets with data ingestion and dashboard creation. Centralized audit and access management using Cyberark and Bitwarden for secure password tool usage. Automated tasks and implemented Infrastructure as Code (IaC) with Shell script, Ansible, AWX, Vagrant, and Terraform. Administered and maintained GitHub and GitLab repositories, ensuring effective version control and collaboration. Enhanced Docker container images for improved application deployment and performance. Maintained and improved SOC infrastructure by reviewing storage and RAID configurations to ensure high availability. Facilitated installation and support at log collection points (probes) for clients, hardening OS environments on systems such as Ubuntu, CentOS, and Oracle Linux. Configured and managed environments like Microsoft 365, Active Directory, Zabbix, GPOs, file servers, backup solutions (Backupexec, Vinchin Backup), Hyper-V, VMware ESXi/vCenter, Checkpoint Firewall clusters, load balancing solutions (HAproxy, Pacemaker), DNS (Cloudflare), DDNS, port forwarding, website blocking by categories, and VPNs for remote work policies. Set up comprehensive monitoring for all SOC-managed assets, internally and for clients. Supported development squads with system pipelines for SOC and threat intelligence. Documented network environment and "How-to" procedures using Confluence and Racktables to facilitate knowledge sharing among engineering teams. Organized routines and tasks using Microsoft Planner and Trello. Delivered lectures, workshops, and mini-courses on security frameworks (MITRE ATT&CK, NIST, OWASP) and multicloud infrastructure (AWS and VMware), contributing to the continuous education and professional development of team members.


1/1/2022 - 5/1/2022

In the role, expertise in identifying, mapping, analyzing, and organizing security processes was developed. This included creating comprehensive security policies, plans, standards, and procedures. Proficiency was gained in developing projects to implement and update security parameters, identifying and analyzing risks in security systems, and conducting periodic reliability tests and audits of electronic security systems. Additionally, there was significant experience in coordinating team shifts and schedules, as well as managing data and contracts with service providers.


11/1/2021 - Present

Served as a Firewall Deployment Specialist providing comprehensive protection for Windows Server 2016 and 2019 environments. Expert in Active Directory configuration, inclusive of both on-premises and Azure Active Directory, ensuring seamless integration and synchronization. Managed critical Active Directory components such as Kerberos roles, FSMO, AD database replication, and SYSVOL, alongside the implementation of Group Policy. Utilized an array of troubleshooting protocols and tools such as TCP/IP, scripts, resource kit diagnostic tools, packet sniffers, and NetMon.

Engineered and deployed modern identity solutions including Azure AD MFA, Conditional Access, Privileged Identity Management, B2B, and Application Proxy. Demonstrated proficiency in PowerShell scripting for enhanced administration tasks. Possesses a deep understanding of Windows Server infrastructure design and deployment in large enterprise environments, covering client/server fundamentals, networking, and internet technologies. Developed strategic consultancy services to efficiently and securely use technology resources.

Undertook comprehensive vulnerability analysis and applied corrective actions, managing security assets including Firewall, EPP, AntiSpam, and ensuring physical and network infrastructure security across various platforms like WiFi networks, Servers, and Workstations. Demonstrated expertise in risk mitigation and implementing secure communication structures. Oversaw the implementation and maintenance of applied systems and software, and managed the development and integration of technological solutions.

Planned and executed projects involving IP CCTV electronic surveillance systems and provided high-capacity links for customers in remote areas using wireless technologies such as Mikrotik and Ubiquiti. Conducted thorough troubleshooting for hardware and software issues, including remote access/VPN and wireless networking. Facilitated cloud environment deployments on AWS and managed email and hybrid cloud solutions with Microsoft Office365.

"Gerente de TI" translates to "IT Manager" from Portuguese to English. However, "IT Manager" is not an educational institution, but rather a job title. Please provide the name of an educational institution for translation or clarification.


3/1/2010 - 10/1/2021

Led the project to implement and enhance a WiFi network serving over 700 students and staff, demonstrating expertise in network infrastructure. Successfully deployed more than 240 video surveillance devices (CCTV) using Intelbras and Hikvision technology, connecting them across 15 institution buildings. Implemented a WiFi Hotspot in a Green Area, supporting over 400 simultaneous users using Ubiquiti Unifi AC M-PRO. Created and managed a comprehensive fingerprint registration database for physical access control in controlled environments, leveraging Neokoros technology.

Installed and administered a PABX VoIP telephony system with Asterisk and FreePBX, integrating endpoints from Polycom, Yealink, Cisco, Linksys, Bria, and Zoiper. Engineered a cloud infrastructure on AWS for hosting the IABC Benefits Club score and bonus application. Implemented endpoint backups using Synology and Microsoft OneDrive, ensuring data integrity and availability.

Managed Exchange Email services, Office 365, and Microsoft Azure AD, optimizing communication and collaboration tools. Established a Zoom Enterprise video conferencing room with LG equipment and Logitech Meetup for seamless virtual meetings. Administered a Pfsense Firewall Server, enhancing network security and functionality through WAN routing services, NAT, Captive Portal login authentication, VPN (OpenVPN), DHCP, NTP, PfBlockerNG, Squid Proxy, Bandwidth Control, Traffic Shaper, Load Balancing, and Failover.

Consolidated servers using Citrix Xenserver Virtualization and ensured compliance of endpoints and servers running Microsoft Windows Server, Linux, FreeBSD, OpenBSD, and MacOSX. Executed installation and configuration of Synology storages, managing Raid and group policies and accesses efficiently. Deployed servers for website hosting with cPanel and Linux, and managed network assets for Dell, HP, Intelbras, and Ubiquiti switches.

Implemented a Data Processing Central Room with Pfsense, Linux, and Windows servers, UPS, and monitoring systems using PRTG, and SQL databases. Provided management and hands-on training for scholarship students in the IT sector, encompassing both theoretical and practical activities.


3/1/2007 - 3/1/2010

Gained extensive experience in HelpDesk and troubleshooting, providing critical support for analog and VoIP telephony systems, including Asterisk. Played a significant role in requirements analysis for telephony solutions. Demonstrated technical proficiency in managing VPN configurations using OpenVPN and remote access systems utilizing Microsoft RDP. Oversaw website and application management for platforms such as Joomla and WordPress. Skilled in performing SQL database backups and managing firewalls, ensuring high availability of network environments on a 24/7/365 basis. Responsible for the monitoring, maintenance, administration, and advancement of network infrastructures. Spearheaded the design and implementation of network projects in educational institutions within the Adventist education network. Centralized the management and documentation of network infrastructures. Provided support and actively participated in various institutional events and projects, including enrollment launches, lectures, workshops, and other commemorative activities.


1/1/2006 - 3/1/2007

Developed technical expertise in computer network support, ensuring seamless connectivity and optimal performance. Gained proficiency in formatting and operating system installation, as well as the installation and management of third-party software applications. Demonstrated competence in managing and maintaining wireless networks and telephony systems to provide reliable communication solutions. Excelled in computer lab management by setting up and maintaining hardware and software used by students and faculty. Monitored and regulated student web activities to ensure compliance with institutional guidelines. Provided classroom support for teachers, troubleshooting technical issues, and ensuring that all educational technology operates smoothly.

Howdy Candidates

Work experience

Education

Certifications